{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:20464bb1-632a-4460-a41c-1dd658c9a485",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-21T17:41:02Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "react-datetime",
      "group": "",
      "version": "2.16.3",
      "description": "A lightweight but complete datetime picker React.js component",
      "purl": "pkg:npm/react-datetime@2.16.3",
      "bom-ref": "pkg:npm/react-datetime@2.16.3",
      "author": "Javier Marquez",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build:mac, build:win, dev, lint, notify-pre-commit-hook, test, test:typings, test:snapshot, test:snapshot:update, test:all, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build:mac, build:win, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "demo",
          "version": "0.1.0",
          "purl": "pkg:npm/demo@0.1.0",
          "type": "application",
          "bom-ref": "pkg:npm/demo@0.1.0",
          "properties": [
            {
              "name": "cdx:npm:scripts",
              "value": "predeploy, deploy, start, build, test, eject"
            },
            {
              "name": "cdx:npm:buildScripts",
              "value": "build"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/YouCanBookMe/react-datetime"
        },
        {
          "type": "vcs",
          "url": "https://github.com/YouCanBookMe/react-datetime"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@gulp-sourcemaps\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "demo/package-lock.json\\ndemo/yarn.lock\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "create-react-class",
      "version": "15.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab448497c26566e1e29413e883207d57cfe7bed4"
        },
        {
          "alg": "SHA-256",
          "content": "ab448497c26566e1e29413e883207d57cfe7bed4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-react-class@15.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-react-class@15.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "create-react-class"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 5
          },
          {
            "location": "example/formatChangeExample.js",
            "line": 4
          },
          {
            "location": "example/viewModeChangeExample.js",
            "line": 4
          },
          {
            "location": "src/CalendarContainer.js",
            "line": 4
          },
          {
            "location": "src/DaysView.js",
            "line": 4
          },
          {
            "location": "src/MonthsView.js",
            "line": 4
          },
          {
            "location": "src/TimeView.js",
            "line": 4
          },
          {
            "location": "src/YearsView.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fbjs",
      "version": "0.8.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "10b5d92f76d45575fd63a217d4ea02bea2f8ed04"
        },
        {
          "alg": "SHA-256",
          "content": "10b5d92f76d45575fd63a217d4ea02bea2f8ed04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fbjs@0.8.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fbjs@0.8.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "652294c14651db28fa93bd2d5ff2983a4f08c636"
        },
        {
          "alg": "SHA-256",
          "content": "652294c14651db28fa93bd2d5ff2983a4f08c636"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isomorphic-fetch",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "611ae1acf14f5e81f729507472819fe9733558a9"
        },
        {
          "alg": "SHA-256",
          "content": "611ae1acf14f5e81f729507472819fe9733558a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isomorphic-fetch@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "1.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fc5ec14608bc3bf6f597919b4c4a698b68e93dcf9490f5b57fb646d9542aaf830ceb8c01aaeba8a0a1b2e87c7b45eb736f313a765a3cada6c35318a6be5d121"
        },
        {
          "alg": "SHA-256",
          "content": "899cb3d0a3c92f952c47f1b876f4c8aeabd400d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-fetch@1.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@1.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "538b66f3ee62cd1ab51ec323829d1f9480c74beb"
        },
        {
          "alg": "SHA-256",
          "content": "538b66f3ee62cd1ab51ec323829d1f9480c74beb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encoding@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23d8656b16aae6742ac29732ea8f0336a4789cf2"
        },
        {
          "alg": "SHA-256",
          "content": "23d8656b16aae6742ac29732ea8f0336a4789cf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        },
        {
          "alg": "SHA-256",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c84ec2dcf68187ff00bc64e1274b442176e1c84"
        },
        {
          "alg": "SHA-256",
          "content": "9c84ec2dcf68187ff00bc64e1274b442176e1c84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1a8ad33fa9ce0e713d65fdd0ac8b748d478c848"
        },
        {
          "alg": "SHA-256",
          "content": "d1a8ad33fa9ce0e713d65fdd0ac8b748d478c848"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9866df395102130e38f7f996bceb65443209c25b"
        },
        {
          "alg": "SHA-256",
          "content": "9866df395102130e38f7f996bceb65443209c25b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        },
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        },
        {
          "alg": "SHA-256",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "object-assign"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 3
          },
          {
            "location": "src/TimeView.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise",
      "version": "7.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e89505d9ff82fe6cffd41a591f688ba35fd04ac46c2643d393e263ade72bf2f222b5877c2a4c42428a3cc600d4c20a5f675a3638d63bb2027d8add0d612cb4e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise@7.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e50347611d7e690943208bbdafebcbc2fb866d46"
        },
        {
          "alg": "SHA-256",
          "content": "e50347611d7e690943208bbdafebcbc2fb866d46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "290cbb232e306942d7d7ea9b83732ab7856f8285"
        },
        {
          "alg": "SHA-256",
          "content": "290cbb232e306942d7d7ea9b83732ab7856f8285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ua-parser-js",
      "version": "0.7.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "110d53fa4c3f326c121292bbeac904d2e03387ca"
        },
        {
          "alg": "SHA-256",
          "content": "110d53fa4c3f326c121292bbeac904d2e03387ca"
        }
      ],
      "licenses": [
        {
          "expression": "GPL-2.0-only OR MIT"
        }
      ],
      "purl": "pkg:npm/ua-parser-js@0.7.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-js@0.7.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.14.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You are using an outdated version of ua-parser-js. Please update to ua-parser-js v0.7.33 / v1.0.33 / v2.0.0 (or later) to avoid ReDoS vulnerability [CVE-2022-25927](https://github.com/advisories/GHSA-fhg7-m89q-25r3)"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "3.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bedd5ca0897949bca47e7ff408062d549f587f2"
        },
        {
          "alg": "SHA-256",
          "content": "9bedd5ca0897949bca47e7ff408062d549f587f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "object-assign"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 3
          },
          {
            "location": "src/TimeView.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prop-types",
      "version": "15.5.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2797dfc3126182e3a95e3dfbb2e893ddd7456154"
        },
        {
          "alg": "SHA-256",
          "content": "2797dfc3126182e3a95e3dfbb2e893ddd7456154"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prop-types@15.5.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prop-types/-/prop-types-15.5.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prop-types@15.5.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prop-types/-/prop-types-15.5.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "prop-types"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-onclickoutside",
      "version": "6.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "645394f28b547869f454f75156eac09918725c881e8e87289c2509d60f5307f6a8adb90d898f0f04428ac19a88d7f49f7eb1ff5450d2347e4be7103844acfaea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-onclickoutside@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-onclickoutside/-/react-onclickoutside-6.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-onclickoutside@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-onclickoutside/-/react-onclickoutside-6.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-onclickoutside"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 9
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "15.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "baa8434ec6780bde997cdc380b79cd33b96393df"
        },
        {
          "alg": "SHA-256",
          "content": "baa8434ec6780bde997cdc380b79cd33b96393df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@15.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-15.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@15.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-15.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react,Component,react/Component"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 7
          },
          {
            "location": "demo/src/App.js",
            "line": 1
          },
          {
            "location": "demo/src/CustomizableExample.js",
            "line": 1
          },
          {
            "location": "demo/src/OpenExample.js",
            "line": 1
          },
          {
            "location": "demo/src/ValidatedExample.js",
            "line": 1
          },
          {
            "location": "demo/src/index.js",
            "line": 1
          },
          {
            "location": "example/example.js",
            "line": 2
          },
          {
            "location": "example/formatChangeExample.js",
            "line": 2
          },
          {
            "location": "example/viewModeChangeExample.js",
            "line": 2
          },
          {
            "location": "src/CalendarContainer.js",
            "line": 3
          },
          {
            "location": "src/DaysView.js",
            "line": 3
          },
          {
            "location": "src/MonthsView.js",
            "line": 3
          },
          {
            "location": "src/TimeView.js",
            "line": 3
          },
          {
            "location": "src/YearsView.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "15.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2cb0ed4191038e53c209eb3a79a23e2a4cf99470"
        },
        {
          "alg": "SHA-256",
          "content": "2cb0ed4191038e53c209eb3a79a23e2a4cf99470"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-dom@15.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-15.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@15.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-15.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "demo/src/index.js",
            "line": 2
          },
          {
            "location": "demo/src/index.js",
            "line": 5
          },
          {
            "location": "example/example.js",
            "line": 3
          },
          {
            "location": "example/formatChangeExample.js",
            "line": 3
          },
          {
            "location": "example/viewModeChangeExample.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@types",
      "name": "react",
      "version": "15.0.38",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a4441dbb2ff90c0eeecadb453457b07060af7f90f77d226e89971bf6bc012895806f432e89ad2a4f26c6d95ed3a4e0ca035289a472df10ecf3415122ddd1f9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/react@15.0.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/react/-/react-15.0.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/react@15.0.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/react/-/react-15.0.38.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/react"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-core",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7dd42b0463c742e9d5296deb3ec67a9322dad729"
        },
        {
          "alg": "SHA-256",
          "content": "7dd42b0463c742e9d5296deb3ec67a9322dad729"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-core@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-core/-/babel-core-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-core@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-core/-/babel-core-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "027620bee567a88c32561574e7fd0801d33118e4"
        },
        {
          "alg": "SHA-256",
          "content": "027620bee567a88c32561574e7fd0801d33118e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        },
        {
          "alg": "SHA-256",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        },
        {
          "alg": "SHA-256",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        },
        {
          "alg": "SHA-256",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        },
        {
          "alg": "SHA-256",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        },
        {
          "alg": "SHA-512",
          "content": "4c81a74e9768f84dfea42c8096e66fb440f9a79c02a8b75ecc2ca13d9cca3dcc6f169944b788be5bb38e3422a0799153dfecb935965f38e4bf05d71a9e6d4c60"
        },
        {
          "alg": "SHA-256",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        },
        {
          "alg": "SHA-512",
          "content": "561ba64926c1a834cff29d992ca8f8d148c1095e3ebfc6d4484a546f82a34605a4f696ea185e111058fa2846a089d6f67ff33a0330b41261720cd19ac3d382ce"
        },
        {
          "alg": "SHA-256",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        },
        {
          "alg": "SHA-256",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        },
        {
          "alg": "SHA-256",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-generator",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33a1af70d5f2890aeb465a4a7793c1df6a9ea9fc"
        },
        {
          "alg": "SHA-256",
          "content": "33a1af70d5f2890aeb465a4a7793c1df6a9ea9fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-generator@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-generator@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-messages",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3cdf4703858035b2a2951c6ec5edf6c62f2630e"
        },
        {
          "alg": "SHA-256",
          "content": "f3cdf4703858035b2a2951c6ec5edf6c62f2630e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-messages@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-messages@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-runtime",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a9489f144de70efb3ce4300accdb329e2fc543b"
        },
        {
          "alg": "SHA-256",
          "content": "0a9489f144de70efb3ce4300accdb329e2fc543b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de911e667b0eae9124e34254b53aea6fc618d3e"
        },
        {
          "alg": "SHA-256",
          "content": "4de911e667b0eae9124e34254b53aea6fc618d3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "336c3efc1220adcedda2c9fab67b5a7955a33658"
        },
        {
          "alg": "SHA-256",
          "content": "336c3efc1220adcedda2c9fab67b5a7955a33658"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-types",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "70afb248d5660e5d18f811d91c8303b54134a18e"
        },
        {
          "alg": "SHA-256",
          "content": "70afb248d5660e5d18f811d91c8303b54134a18e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-types@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-types/-/babel-types-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-types@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-types/-/babel-types-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae"
        },
        {
          "alg": "SHA-256",
          "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b83571fa4d8c25b82e231b06e3a3055de4ca1a47"
        },
        {
          "alg": "SHA-256",
          "content": "b83571fa4d8c25b82e231b06e3a3055de4ca1a47"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-fast-properties@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-indent",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f76d064352cdf43a1cb6ce619c4ee3a9475de208"
        },
        {
          "alg": "SHA-256",
          "content": "f76d064352cdf43a1cb6ce619c4ee3a9475de208"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-indent/-/detect-indent-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-indent/-/detect-indent-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5214c53a926d3552707527fbab415dbc08d06dda"
        },
        {
          "alg": "SHA-256",
          "content": "5214c53a926d3552707527fbab415dbc08d06dda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
        },
        {
          "alg": "SHA-256",
          "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        },
        {
          "alg": "SHA-512",
          "content": "e236ed657340b1f65b0078a2aa32cf0620a5d7a7444b5cc8e07a73cf1c3ad5393e96817eb010c12b1d4808a28ac08a90eccd26167d539a437b7ae4a771680789"
        },
        {
          "alg": "SHA-256",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46c3fec8c1892b12b0833db9bc7622176dbab34b"
        },
        {
          "alg": "SHA-256",
          "content": "46c3fec8c1892b12b0833db9bc7622176dbab34b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75ce38f52bf0733c5a7f0c118d81334a2bb5f412"
        },
        {
          "alg": "SHA-256",
          "content": "75ce38f52bf0733c5a7f0c118d81334a2bb5f412"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-right",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb2e1203067e0c8de1f614094b9fe45704ea6003"
        },
        {
          "alg": "SHA-256",
          "content": "cb2e1203067e0c8de1f614094b9fe45704ea6003"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-right@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/trim-right/-/trim-right-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trim-right@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/trim-right/-/trim-right-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helpers",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3471de9caec388e5c850e597e58a26ddf37602b2"
        },
        {
          "alg": "SHA-256",
          "content": "3471de9caec388e5c850e597e58a26ddf37602b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helpers@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helpers/-/babel-helpers-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helpers@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helpers/-/babel-helpers-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-template",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "665241166b7c2aa4c619d71e192969552b10c071"
        },
        {
          "alg": "SHA-256",
          "content": "665241166b7c2aa4c619d71e192969552b10c071"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-template@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-template/-/babel-template-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-template@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-template/-/babel-template-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-traverse",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2257497e2fcd19b89edc13c4c91381f9512496f1"
        },
        {
          "alg": "SHA-256",
          "content": "2257497e2fcd19b89edc13c4c91381f9512496f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-traverse@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-traverse@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babylon",
      "version": "6.17.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90286557ed125e48c4d2f527f4e67ba4131644577cbaade665ef31d4aea386e35c00502d1278dc84502a07e7581172b277e2694fa7a9a5147bf1002be604ec53"
        },
        {
          "alg": "SHA-256",
          "content": "3e8b7402b88d22c3423e137a1577883b15ff869a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babylon@6.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babylon/-/babylon-6.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@6.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babylon/-/babylon-6.17.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/babylon"
        },
        {
          "name": "cdx:npm:bin",
          "value": "babylon"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        },
        {
          "alg": "SHA-512",
          "content": "136d9fb3258fb7f96be3f52040bb7fa57a9eac6303b1a9e16e79aa212dd5017b838b5bf72298b05deda89dc108a27747481b8f0d64682bfa4c8e5be2f05b8e5d"
        },
        {
          "alg": "SHA-256",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        },
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        },
        {
          "alg": "SHA-256",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "9.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b49c6dc22c442263f20bc6ab73b53587ff789145dc812f0e8a303c6728c721aed6e3d8e1667a1561d165027d6dc352b220c7fa85ac93c80abab8678b1347d51"
        },
        {
          "alg": "SHA-256",
          "content": "aa3896b3e69b487f17e31ed2143d69a8e30c2d8a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@9.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-9.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@9.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-9.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invariant",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e1f56ac0acdb6bf303306f338be3b204ae60360"
        },
        {
          "alg": "SHA-256",
          "content": "9e1f56ac0acdb6bf303306f338be3b204ae60360"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invariant@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invariant/-/invariant-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invariant/-/invariant-2.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-register",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e10e13a2f71065bdfad5a1787ba45bca6ded75f"
        },
        {
          "alg": "SHA-256",
          "content": "7e10e13a2f71065bdfad5a1787ba45bca6ded75f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-register@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-register/-/babel-register-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-register@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-register/-/babel-register-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "home-or-tmp",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e36c3f2d2cae7d746a857e38d18d5f32a7882db8"
        },
        {
          "alg": "SHA-256",
          "content": "e36c3f2d2cae7d746a857e38d18d5f32a7882db8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/home-or-tmp@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/home-or-tmp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
        },
        {
          "alg": "SHA-512",
          "content": "079254ddc69bce4f1cebb99145ddc40a644e69f8d83176eece5c2da9d33c21b4bc92d9538b1f1a1466f66c018aad24489677cac28bc6514afbd8950fc8e6fa91"
        },
        {
          "alg": "SHA-256",
          "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        },
        {
          "alg": "SHA-512",
          "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
        },
        {
          "alg": "SHA-256",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        },
        {
          "alg": "SHA-512",
          "content": "4a49c90b9da86cf7c640f9e32245db980ebee47d7913e7d1f84e22476a10df3cc22db77bfce36e6baf51fc6c3b0209132ec446fabe5fce4b18c167b50204f258"
        },
        {
          "alg": "SHA-256",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        },
        {
          "alg": "SHA-512",
          "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed"
        },
        {
          "alg": "SHA-256",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.4.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03202df65c06d2bd8c7ec2362a193056fef8d3b1"
        },
        {
          "alg": "SHA-256",
          "content": "03202df65c06d2bd8c7ec2362a193056fef8d3b1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.4.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9acd70851c6d5dfdd93d9282e5edf94a03ff46b5"
        },
        {
          "alg": "SHA-256",
          "content": "9acd70851c6d5dfdd93d9282e5edf94a03ff46b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1eade7acc012034ad84e2396767ead9fa5495821"
        },
        {
          "alg": "SHA-256",
          "content": "1eade7acc012034ad84e2396767ead9fa5495821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        },
        {
          "alg": "SHA-256",
          "content": "5166e286457f03306064be5497e8dbb0c3d32083"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
        },
        {
          "alg": "SHA-256",
          "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        },
        {
          "alg": "SHA-256",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        },
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        },
        {
          "alg": "SHA-256",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        },
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        },
        {
          "alg": "SHA-256",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "private",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68ce5e8a1ef0a23bb570cc28537b5332aba63ef1"
        },
        {
          "alg": "SHA-256",
          "content": "68ce5e8a1ef0a23bb570cc28537b5332aba63ef1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/private@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/private/-/private-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/private@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/private/-/private-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c41f2f6c39fc16d1cd17ad4b5d896114ae470d55"
        },
        {
          "alg": "SHA-256",
          "content": "c41f2f6c39fc16d1cd17ad4b5d896114ae470d55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slash@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-jest",
      "version": "18.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17ebba8cb3285c906d859e8707e4e79795fb65e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-jest@18.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-jest/-/babel-jest-18.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-jest@18.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-jest/-/babel-jest-18.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-istanbul",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11d5abde18425ec24b5d648c7e0b5d25cd354a22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-istanbul@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        },
        {
          "alg": "SHA-256",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        },
        {
          "alg": "SHA-256",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        },
        {
          "alg": "SHA-256",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        },
        {
          "alg": "SHA-256",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "1.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9fd920e4767f3d19edc765e2d6b3f5ccbd0eea8"
        },
        {
          "alg": "SHA-256",
          "content": "e9fd920e4767f3d19edc765e2d6b3f5ccbd0eea8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@1.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@1.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.7.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73bfb998885299415c93d38a3e9adf784a77a9da"
        },
        {
          "alg": "SHA-256",
          "content": "73bfb998885299415c93d38a3e9adf784a77a9da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
        },
        {
          "alg": "SHA-512",
          "content": "99f9a6dff1fdfbaecc0958b1d61f885d3a43c0bebbd742f21ee93bf9c582f53d66134ab3e221e187aaf8854db0ac84fd893b00002d97411bdf6e52f4dbc7292f"
        },
        {
          "alg": "SHA-256",
          "content": "9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a17ca1239988c98367b0621456dbb7d4bc38977"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/test-exclude@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-exclude/-/test-exclude-3.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "898508da2226f380df904728456849c1501a4b0d"
        },
        {
          "alg": "SHA-256",
          "content": "898508da2226f380df904728456849c1501a4b0d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "2.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86677c97d1720b363431d04d0d15293bd38c1565"
        },
        {
          "alg": "SHA-256",
          "content": "86677c97d1720b363431d04d0d15293bd38c1565"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/micromatch@2.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@2.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        },
        {
          "alg": "SHA-256",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-diff@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        },
        {
          "alg": "SHA-256",
          "content": "36048bbff4e7b47e136644316c99669ea5ae91f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        },
        {
          "alg": "SHA-256",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-unique@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "1.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        },
        {
          "alg": "SHA-256",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/braces@1.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@1.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        },
        {
          "alg": "SHA-256",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-range@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        },
        {
          "alg": "SHA-256",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fill-range@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        },
        {
          "alg": "SHA-256",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        },
        {
          "alg": "SHA-256",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f3b26ef613b214b88cbca23cc6c01d87961eecc"
        },
        {
          "alg": "SHA-256",
          "content": "1f3b26ef613b214b88cbca23cc6c01d87961eecc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version of 'is-buffer' is out-of-date. You must update to v1.1.6 or newer"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        },
        {
          "alg": "SHA-256",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        },
        {
          "alg": "SHA-512",
          "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
        },
        {
          "alg": "SHA-256",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomatic",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c7abe9cc8b87c0baa876b19fde83fd464797e38c"
        },
        {
          "alg": "SHA-256",
          "content": "c7abe9cc8b87c0baa876b19fde83fd464797e38c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randomatic@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomatic@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        },
        {
          "alg": "SHA-256",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        },
        {
          "alg": "SHA-256",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        },
        {
          "alg": "SHA-256",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        },
        {
          "alg": "SHA-256",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preserve",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        },
        {
          "alg": "SHA-256",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/preserve@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preserve@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        },
        {
          "alg": "SHA-256",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-brackets@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-posix-bracket",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        },
        {
          "alg": "SHA-256",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-posix-bracket@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-posix-bracket@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        },
        {
          "alg": "SHA-256",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extglob@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        },
        {
          "alg": "SHA-256",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-regex",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26"
        },
        {
          "alg": "SHA-256",
          "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filename-regex@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-regex@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        },
        {
          "alg": "SHA-256",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        },
        {
          "alg": "SHA-256",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "69b062d978727ad14dc6b56ba4ab772fd8d70511"
        },
        {
          "alg": "SHA-256",
          "content": "69b062d978727ad14dc6b56ba4ab772fd8d70511"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.omit",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa"
        },
        {
          "alg": "SHA-256",
          "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.omit@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.omit@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5265c681a4f294dabbf17c9509b6763aa84510ce"
        },
        {
          "alg": "SHA-256",
          "content": "5265c681a4f294dabbf17c9509b6763aa84510ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-own@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        },
        {
          "alg": "SHA-256",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        },
        {
          "alg": "SHA-256",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-glob",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        },
        {
          "alg": "SHA-256",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-glob@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-glob@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-base",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        },
        {
          "alg": "SHA-256",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-base@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-base@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        },
        {
          "alg": "SHA-256",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-dotfile",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1"
        },
        {
          "alg": "SHA-256",
          "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-dotfile@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-dotfile@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-cache",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b1a6c35d4d0dfcef5711ae651e8e9d3d7114145"
        },
        {
          "alg": "SHA-256",
          "content": "9b1a6c35d4d0dfcef5711ae651e8e9d3d7114145"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regex-cache@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-cache@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-equal-shallow",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        },
        {
          "alg": "SHA-256",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-equal-shallow@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-equal-shallow@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-primitive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        },
        {
          "alg": "SHA-256",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-primitive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-primitive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        },
        {
          "alg": "SHA-256",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        },
        {
          "alg": "SHA-256",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        },
        {
          "alg": "SHA-256",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        },
        {
          "alg": "SHA-512",
          "content": "f71e832d4b96f9138574c4c823d79cf6dfc52bcbdaea461c0bcfcb820ba6b2c2ccf2436fec874597756b354aa08abdad26e055c4181ad5006847389969c3b966"
        },
        {
          "alg": "SHA-256",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        },
        {
          "alg": "SHA-256",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
        },
        {
          "alg": "SHA-256",
          "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        },
        {
          "alg": "SHA-256",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        },
        {
          "alg": "SHA-256",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        },
        {
          "alg": "SHA-256",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        },
        {
          "alg": "SHA-256",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12f95a307d58352075a04907b84ac8be98ac012f"
        },
        {
          "alg": "SHA-256",
          "content": "12f95a307d58352075a04907b84ac8be98ac012f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d60e34b3abbc8313062c3b798ef8d901a07af3c"
        },
        {
          "alg": "SHA-256",
          "content": "6d60e34b3abbc8313062c3b798ef8d901a07af3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        },
        {
          "alg": "SHA-256",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-builtin-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        },
        {
          "alg": "SHA-256",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        },
        {
          "alg": "SHA-256",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        },
        {
          "alg": "SHA-256",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
        },
        {
          "alg": "SHA-256",
          "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
        },
        {
          "alg": "SHA-256",
          "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
        }
      ],
      "licenses": [
        {
          "expression": "MIT AND CC-BY-3.0"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        },
        {
          "alg": "SHA-256",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        },
        {
          "alg": "SHA-256",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-jest",
      "version": "18.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84faf8ca3ec65aba7d5e3f59bbaed935ab24049e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-jest@18.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-18.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-jest@18.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-18.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-jest-hoist",
      "version": "18.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4150e70ecab560e6e7344adc849498072d34e12a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-jest-hoist@18.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-18.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-jest-hoist@18.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-18.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-loader",
      "version": "6.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b34112d5b0748a8dcdbf51acf6f9bd42d50b8ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-loader@6.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-loader/-/babel-loader-6.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-loader@6.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-loader/-/babel-loader-6.4.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2a1226804373ffd3d03ea9c6bd525067034f6b1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-2.7.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/webpack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53fe161111f912ab999ee887a90a0bc52822fd75"
        },
        {
          "alg": "SHA-256",
          "content": "53fe161111f912ab999ee887a90a0bc52822fd75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-5.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-dynamic-import",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c752bd210bef679501b6c6cb7fc84f8f47158cc4"
        },
        {
          "alg": "SHA-256",
          "content": "c752bd210bef679501b6c6cb7fc84f8f47158cc4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-dynamic-import@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-dynamic-import/-/acorn-dynamic-import-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-dynamic-import@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-dynamic-import/-/acorn-dynamic-import-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This is probably built in to whatever tool you're using. If you still need it... idk"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "4.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "105495ae5361d697bd195c825192e1ad7f253787"
        },
        {
          "alg": "SHA-256",
          "content": "105495ae5361d697bd195c825192e1ad7f253787"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@4.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@4.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/acorn-dynamic-import/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-sourcemaps/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jest-environment-jsdom/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/acorn-globals/node_modules/.bin/acorn"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "4.11.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82ffb02b29e662ae53bdc20af15947706739c536"
        },
        {
          "alg": "SHA-512",
          "content": "23f6d21d234470516a5cb7fdd67721a0d07d0f52a27b740a71675c85851aa08835fb56dd58391d7dd96f7483896e2f54f31474cbe3167390fec289fdbfde5695"
        },
        {
          "alg": "SHA-256",
          "content": "82ffb02b29e662ae53bdc20af15947706739c536"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@4.11.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@4.11.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        },
        {
          "alg": "SHA-512",
          "content": "4156f474ce47bc6fae6b18ad9bcc0e365ee396dc7c76a85f537dc372ab4e65c2d25482920c32c38bbfb42db00a8b223c843f6ee369b66315d290c1964e169e71"
        },
        {
          "alg": "SHA-256",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
        },
        {
          "alg": "SHA-512",
          "content": "8bf276f7b4d6eb1ca3eec0c56bb02604f910bcb2315abda428f588dbab57c9d9d9af3540a1c36a9f90cc353d4cce4d2f8add55e5491133b0b529d54da7b2e672"
        },
        {
          "alg": "SHA-256",
          "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
        },
        {
          "alg": "SHA-512",
          "content": "b6bbc1935922e37559a6d741239ac8946e183b3c9e1ff59e7d0b79ae3d60adab0f9f88a265629eb7c9e481ce0696c03295aced9f4a997d460e893b0048915d34"
        },
        {
          "alg": "SHA-256",
          "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "314dd0a4b3368fad3dfcdc54ede6171b886daf3c"
        },
        {
          "alg": "SHA-256",
          "content": "314dd0a4b3368fad3dfcdc54ede6171b886daf3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv-keywords@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "843190fd6b7357a0b9e1c956edddd5ec8462b54d"
        },
        {
          "alg": "SHA-256",
          "content": "843190fd6b7357a0b9e1c956edddd5ec8462b54d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "3.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0421e339fd71419b3da13d129b3979040230476e"
        },
        {
          "alg": "SHA-256",
          "content": "0421e339fd71419b3da13d129b3979040230476e"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@3.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-3.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@3.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-3.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a9a20b8462523e447cfbc7e8bb80ed667bfc552"
        },
        {
          "alg": "SHA-256",
          "content": "3a9a20b8462523e447cfbc7e8bb80ed667bfc552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memory-fs@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errno",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b896e23a9e5e8ba33871fc996abd3635fc9a1c7d"
        },
        {
          "alg": "SHA-256",
          "content": "b896e23a9e5e8ba33871fc996abd3635fc9a1c7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/errno@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errno/-/errno-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errno@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errno/-/errno-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/errno"
        },
        {
          "name": "cdx:npm:bin",
          "value": "errno"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prr",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a84b85908325501411853d0081ee3fa86e2926a"
        },
        {
          "alg": "SHA-256",
          "content": "1a84b85908325501411853d0081ee3fa86e2926a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prr@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prr/-/prr-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prr@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prr/-/prr-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "368f2512d79f9d46fdfc71349ae7878bbc1eb95c"
        },
        {
          "alg": "SHA-256",
          "content": "368f2512d79f9d46fdfc71349ae7878bbc1eb95c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        },
        {
          "alg": "SHA-512",
          "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69"
        },
        {
          "alg": "SHA-256",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        },
        {
          "alg": "SHA-512",
          "content": "c74d0844d5cdcbade3c069099b33e2828c921db6aaa4dbb329b04e9b32be83639d66943dc3eb3108df95481de36bb20081ed8e3f6aa97f14e378d7328e65b5bb"
        },
        {
          "alg": "SHA-256",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
        },
        {
          "alg": "SHA-512",
          "content": "c8dd16426b825fadcb3ff4ccbc0837d67bd3ea6e2f0ea2448a2bf608066a58e18d5aeb5cf437c393534f61898a50599a54cd94c03a301f8bb90075983ff8f12b"
        },
        {
          "alg": "SHA-256",
          "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "893312af69b2123def71f57889001671eeb2c853"
        },
        {
          "alg": "SHA-256",
          "content": "893312af69b2123def71f57889001671eeb2c853"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0fc67d7c141825de94282dd536bec6b9bce860ab"
        },
        {
          "alg": "SHA-256",
          "content": "0fc67d7c141825de94282dd536bec6b9bce860ab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        },
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        },
        {
          "alg": "SHA-256",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e46c0daacbb2b8a98b9b0cea0f4052105817ed5c"
        },
        {
          "alg": "SHA-256",
          "content": "e46c0daacbb2b8a98b9b0cea0f4052105817ed5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tapable@0.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-0.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-0.2.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbc35c62eeee73f19ab7b10a801511401afc0f90"
        },
        {
          "alg": "SHA-256",
          "content": "cbc35c62eeee73f19ab7b10a801511401afc0f90"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/interpret@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-loader",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dca14a70235ff82f0ac9a3abeb60d337a365185d"
        },
        {
          "alg": "SHA-256",
          "content": "dca14a70235ff82f0ac9a3abeb60d337a365185d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-loader@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-loader/-/json-loader-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-loader@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-loader/-/json-loader-0.5.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f482aea82d543e07921700d5a46ef26fdac6b8a2"
        },
        {
          "alg": "SHA-256",
          "content": "f482aea82d543e07921700d5a46ef26fdac6b8a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loader-runner@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "0.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f86e6374d43205a6e6c60e9196f17c0299bfb348"
        },
        {
          "alg": "SHA-256",
          "content": "f86e6374d43205a6e6c60e9196f17c0299bfb348"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loader-utils@0.2.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-0.2.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@0.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-0.2.17.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "big.js",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4cada2193652eb3ca9ec8e55c9015669c9806978"
        },
        {
          "alg": "SHA-256",
          "content": "4cada2193652eb3ca9ec8e55c9015669c9806978"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/big.js@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/big.js/-/big.js-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/big.js@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/big.js/-/big.js-3.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emojis-list",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4daa4d9db00f9819880c79fa457ae5b09a1fd389"
        },
        {
          "alg": "SHA-256",
          "content": "4daa4d9db00f9819880c79fa457ae5b09a1fd389"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emojis-list@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emojis-list/-/emojis-list-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emojis-list@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emojis-list/-/emojis-list-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-libs-browser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3a59ec97024985b46e958379646f96c4b616646"
        },
        {
          "alg": "SHA-256",
          "content": "a3a59ec97024985b46e958379646f96c4b616646"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-libs-browser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-libs-browser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99912d591836b5a6f5b345c0f07eefc08fc65d91"
        },
        {
          "alg": "SHA-256",
          "content": "99912d591836b5a6f5b345c0f07eefc08fc65d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert/-/assert-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert/-/assert-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7afb1afe50805246489e3db7fe0ed379336ac0f9"
        },
        {
          "alg": "SHA-256",
          "content": "7afb1afe50805246489e3db7fe0ed379336ac0f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
        },
        {
          "alg": "SHA-256",
          "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb35f8a519f600e0fa6b8485241c979d0141fb2d"
        },
        {
          "alg": "SHA-256",
          "content": "bb35f8a519f600e0fa6b8485241c979d0141fb2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3f7522f4ef782348da8161bad9ecfd51bf83a75"
        },
        {
          "alg": "SHA-256",
          "content": "f3f7522f4ef782348da8161bad9ecfd51bf83a75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pako@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "4.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d1bb601b07a4efced97094132093027c95bc298"
        },
        {
          "alg": "SHA-256",
          "content": "6d1bb601b07a4efced97094132093027c95bc298"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@4.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-4.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@4.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-4.9.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version of 'buffer' is out-of-date. You must update to v4.9.2 or newer"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a91947da1f4a516ea38e5b4ec0ec3773675e0886"
        },
        {
          "alg": "SHA-256",
          "content": "a91947da1f4a516ea38e5b4ec0ec3773675e0886"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be33d40ac10ef1926701f6f08a2d86fbfd1ad3e4"
        },
        {
          "alg": "SHA-256",
          "content": "be33d40ac10ef1926701f6f08a2d86fbfd1ad3e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-browserify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10"
        },
        {
          "alg": "SHA-256",
          "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10"
        }
      ],
      "purl": "pkg:npm/console-browserify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-now",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b"
        },
        {
          "alg": "SHA-256",
          "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b"
        }
      ],
      "purl": "pkg:npm/date-now@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-now@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constants-browserify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c20b96d8c617748aaf1c16021760cd27fcb8cb75"
        },
        {
          "alg": "SHA-256",
          "content": "c20b96d8c617748aaf1c16021760cd27fcb8cb75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-browserify",
      "version": "3.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "948945efc6757a400d6e5e5af47194d10064279f"
        },
        {
          "alg": "SHA-256",
          "content": "948945efc6757a400d6e5e5af47194d10064279f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.11.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-cipher",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9988244874bf5ed4e28da95666dcd66ac8fc363a"
        },
        {
          "alg": "SHA-256",
          "content": "9988244874bf5ed4e28da95666dcd66ac8fc363a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-cipher@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e7725dbdef1fd5930d4ebab48567ce451c48a0a"
        },
        {
          "alg": "SHA-256",
          "content": "5e7725dbdef1fd5930d4ebab48567ce451c48a0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-xor",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26e61ed1422fb70dd42e6e36729ed51d855fe8d9"
        },
        {
          "alg": "SHA-256",
          "content": "26e61ed1422fb70dd42e6e36729ed51d855fe8d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-xor@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cipher-base",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8760e4ecc272f4c363532f926d874aae2c1397de"
        },
        {
          "alg": "SHA-256",
          "content": "8760e4ecc272f4c363532f926d874aae2c1397de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cipher-base@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hash",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "606042ac8b9262750f483caddab0f5819172d8fd"
        },
        {
          "alg": "SHA-256",
          "content": "606042ac8b9262750f483caddab0f5819172d8fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hash@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f4584295c53a3628af7e6d79aca21ce57d1c6e7"
        },
        {
          "alg": "SHA-256",
          "content": "0f4584295c53a3628af7e6d79aca21ce57d1c6e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash-base",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66ea1d856db4e8a5470cadf6fce23ae5244ef2e1"
        },
        {
          "alg": "SHA-256",
          "content": "66ea1d856db4e8a5470cadf6fce23ae5244ef2e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash-base/-/hash-base-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash-base/-/hash-base-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sha.js",
      "version": "2.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37068c2c476b6baf402d14a49c67f597921f634f"
        },
        {
          "alg": "SHA-256",
          "content": "37068c2c476b6baf402d14a49c67f597921f634f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/sha.js"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sha.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "evp_bytestokey",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "497b66ad9fef65cd7c08a6180824ba1476b66e53"
        },
        {
          "alg": "SHA-256",
          "content": "497b66ad9fef65cd7c08a6180824ba1476b66e53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/evp_bytestokey@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-des",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "daa277717470922ed2fe18594118a175439721dd"
        },
        {
          "alg": "SHA-256",
          "content": "daa277717470922ed2fe18594118a175439721dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-des@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "des.js",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c074d2e2aa6a8a9a07dbd61f9a15c2cd83ec8ecc"
        },
        {
          "alg": "SHA-256",
          "content": "c074d2e2aa6a8a9a07dbd61f9a15c2cd83ec8ecc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/des.js/-/des.js-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/des.js@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/des.js/-/des.js-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
        },
        {
          "alg": "SHA-256",
          "content": "702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-sign",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
        },
        {
          "alg": "SHA-256",
          "content": "aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-sign@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bn.js",
      "version": "4.11.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f116257999e7efd257b2d12cea90e3d1d5b0b811ba4fc7c2e43b3e6f31efd88b5e6de61cf080efc6fad73bc0eb4be0f653623c07bbc26712248bba6b928d27c"
        },
        {
          "alg": "SHA-256",
          "content": "ddb048e50d9482790094c13eb3fcfc833ce7ab46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@4.11.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.11.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@4.11.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bn.js/-/bn.js-4.11.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21e0abfaf6f2029cf2fafb133567a701d4135524"
        },
        {
          "alg": "SHA-256",
          "content": "21e0abfaf6f2029cf2fafb133567a701d4135524"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc009a246b8d09a177b4b7a0ae77bc570f4b1b79"
        },
        {
          "alg": "SHA-256",
          "content": "dc009a246b8d09a177b4b7a0ae77bc570f4b1b79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hmac",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "acb9e221a4e17bdb076e90657c42b93e3726cf06"
        },
        {
          "alg": "SHA-256",
          "content": "acb9e221a4e17bdb076e90657c42b93e3726cf06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hmac@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "elliptic",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cac9af8762c85836187003c8dfe193e5e2eae5df"
        },
        {
          "alg": "SHA-256",
          "content": "cac9af8762c85836187003c8dfe193e5e2eae5df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brorand",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12c25efe40a45e3c323eb8675a0a0ce57b22371f"
        },
        {
          "alg": "SHA-256",
          "content": "12c25efe40a45e3c323eb8675a0a0ce57b22371f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brorand@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash.js",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "340dedbe6290187151c1ea1d777a3448935df846"
        },
        {
          "alg": "SHA-256",
          "content": "340dedbe6290187151c1ea1d777a3448935df846"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash.js@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2745701025a6c775a6c545793ed502fc0c649a1"
        },
        {
          "alg": "SHA-256",
          "content": "d2745701025a6c775a6c545793ed502fc0c649a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hmac-drbg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
        },
        {
          "alg": "SHA-256",
          "content": "f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37c4f9b7ed3ab65c74817b5f2480937fbf97c712"
        },
        {
          "alg": "SHA-256",
          "content": "37c4f9b7ed3ab65c74817b5f2480937fbf97c712"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1.js",
      "version": "4.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48ba240b45a9280e94748990ba597d216617fd40"
        },
        {
          "alg": "SHA-256",
          "content": "48ba240b45a9280e94748990ba597d216617fd40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@4.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1.js/-/asn1.js-4.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js@4.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1.js/-/asn1.js-4.9.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pbkdf2",
      "version": "3.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be36785c5067ea48d806ff923288c5f750b6b8a2"
        },
        {
          "alg": "SHA-256",
          "content": "be36785c5067ea48d806ff923288c5f750b6b8a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2@3.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.0.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-ecdh",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "888c723596cdf7612f6498233eebd7a35301737d"
        },
        {
          "alg": "SHA-256",
          "content": "888c723596cdf7612f6498233eebd7a35301737d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-ecdh@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diffie-hellman",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5835739270cfe26acf632099fded2a07f209e5e"
        },
        {
          "alg": "SHA-256",
          "content": "b5835739270cfe26acf632099fded2a07f209e5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diffie-hellman@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "miller-rabin",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a62fb1d42933c05583982f4c716f6fb9e6c6d3d"
        },
        {
          "alg": "SHA-256",
          "content": "4a62fb1d42933c05583982f4c716f6fb9e6c6d3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/miller-rabin@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/miller-rabin"
        },
        {
          "name": "cdx:npm:bin",
          "value": "miller-rabin"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "public-encrypt",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39f699f3a46560dd5ebacbca693caf7c65c18cc6"
        },
        {
          "alg": "SHA-256",
          "content": "39f699f3a46560dd5ebacbca693caf7c65c18cc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/public-encrypt@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "encrypt"
      ]
    },
    {
      "group": "",
      "name": "domain-browser",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867aa4b093faa05f1de08c06f4d7b21fdf8698bc"
        },
        {
          "alg": "SHA-256",
          "content": "867aa4b093faa05f1de08c06f4d7b21fdf8698bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ebdb7635ad099c70dcc4c2a1f5004288e8bd924"
        },
        {
          "alg": "SHA-256",
          "content": "9ebdb7635ad099c70dcc4c2a1f5004288e8bd924"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-browserify",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f91365cabe60b77ed0ebba24b454e3e09d95a82"
        },
        {
          "alg": "SHA-256",
          "content": "3f91365cabe60b77ed0ebba24b454e3e09d95a82"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-browserify",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63fc4ccee5d2d7763d26bbf8601078e6c2e0044f"
        },
        {
          "alg": "SHA-256",
          "content": "63fc4ccee5d2d7763d26bbf8601078e6c2e0044f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a0b870729aae214005b7d5032ec2cbbb0fb4451a"
        },
        {
          "alg": "SHA-256",
          "content": "a0b870729aae214005b7d5032ec2cbbb0fb4451a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7332300e840161bda3e69a1d1d91a7d4bc16f182"
        },
        {
          "alg": "SHA-256",
          "content": "7332300e840161bda3e69a1d1d91a7d4bc16f182"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        },
        {
          "alg": "SHA-512",
          "content": "8e660d1255bbcaf3bb4d5df70a34a6bd2884db2728ddb576733bbf3b30ca74c35565059fc426e55112e17fee3bb32411067b637cb75dfc7d1e82bcc81bea1a15"
        },
        {
          "alg": "SHA-256",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ec61f79049875707d69414596fd907a4d711e73"
        },
        {
          "alg": "SHA-256",
          "content": "9ec61f79049875707d69414596fd907a4d711e73"
        }
      ],
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-browserify",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66266ee5f9bdb9940a4e4514cafb43bb71e5c9db"
        },
        {
          "alg": "SHA-256",
          "content": "66266ee5f9bdb9940a4e4514cafb43bb71e5c9db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-http",
      "version": "2.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40a050ec8dc3b53b33d9909415c02c0bf1abfbad"
        },
        {
          "alg": "SHA-256",
          "content": "40a050ec8dc3b53b33d9909415c02c0bf1abfbad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-http@2.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-http/-/stream-http-2.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-http@2.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-http/-/stream-http-2.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-status-codes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85982878e21b98e1c66425e03d0174788f569ee8"
        },
        {
          "alg": "SHA-256",
          "content": "85982878e21b98e1c66425e03d0174788f569ee8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtin-status-codes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-status-codes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-arraybuffer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d229b1fcc637e466ca081180836a7aabff83f43"
        },
        {
          "alg": "SHA-256",
          "content": "7d229b1fcc637e466ca081180836a7aabff83f43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-arraybuffer@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-arraybuffer/-/to-arraybuffer-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-arraybuffer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-arraybuffer/-/to-arraybuffer-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        },
        {
          "alg": "SHA-256",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        },
        {
          "alg": "SHA-256",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timers-browserify",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab4883cf597dcd50af211349a00fbca56ac86b86"
        },
        {
          "alg": "SHA-256",
          "content": "ab4883cf597dcd50af211349a00fbca56ac86b86"
        }
      ],
      "purl": "pkg:npm/timers-browserify@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a157ba402da24e9bf957f9aa69d524eed42901a6"
        },
        {
          "alg": "SHA-256",
          "content": "a157ba402da24e9bf957f9aa69d524eed42901a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3838e97cfc60521eb73c525a8e55bfdd9e2e28f1"
        },
        {
          "alg": "SHA-256",
          "content": "3838e97cfc60521eb73c525a8e55bfdd9e2e28f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9653a036fb7c1ee42342f2325cceefea3926c48d"
        },
        {
          "alg": "SHA-256",
          "content": "9653a036fb7c1ee42342f2325cceefea3926c48d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b209849203bb25df820da756e747005878521620"
        },
        {
          "alg": "SHA-256",
          "content": "b209849203bb25df820da756e747005878521620"
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "The querystring API is considered Legacy. new code should use the URLSearchParams API instead."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vm-browserify",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d7ea45bbef9e4a6ff65f95438e0a87c357d5a73"
        },
        {
          "alg": "SHA-256",
          "content": "5d7ea45bbef9e4a6ff65f95438e0a87c357d5a73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82dc336d232b9062179d05ab3293a66059fd435d"
        },
        {
          "alg": "SHA-256",
          "content": "82dc336d232b9062179d05ab3293a66059fd435d"
        }
      ],
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6"
        },
        {
          "alg": "SHA-256",
          "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa"
        },
        {
          "alg": "SHA-256",
          "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.8.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29c5733148057bb4e1f75df35b7a9cb72e6a59dd"
        },
        {
          "alg": "SHA-256",
          "content": "29c5733148057bb4e1f75df35b7a9cb72e6a59dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.8.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.8.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
        },
        {
          "alg": "SHA-256",
          "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        },
        {
          "alg": "SHA-256",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
        },
        {
          "alg": "SHA-256",
          "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "center-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad"
        },
        {
          "alg": "SHA-256",
          "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/center-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "align-text",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cd90a561093f35d0a99256c22b7069433fad117"
        },
        {
          "alg": "SHA-256",
          "content": "0cd90a561093f35d0a99256c22b7069433fad117"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/align-text@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
        },
        {
          "alg": "SHA-256",
          "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
        },
        {
          "alg": "SHA-256",
          "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "right-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61339b722fe6a3515689210d24e14c96148613ef"
        },
        {
          "alg": "SHA-256",
          "content": "61339b722fe6a3515689210d24e14c96148613ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/right-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
        },
        {
          "alg": "SHA-256",
          "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        },
        {
          "alg": "SHA-256",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
        },
        {
          "alg": "SHA-256",
          "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7"
        },
        {
          "alg": "SHA-256",
          "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a1472bcbb952bd0a9bb4036801f954dfb39faac"
        },
        {
          "alg": "SHA-256",
          "content": "4a1472bcbb952bd0a9bb4036801f954dfb39faac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchpack@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "798e689778151c8076b4b360e5edd28cda2bb468"
        },
        {
          "alg": "SHA-256",
          "content": "798e689778151c8076b4b360e5edd28cda2bb468"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3e52fa39168c825ff57b0248126ce5a8ff95507"
        },
        {
          "alg": "SHA-256",
          "content": "a3e52fa39168c825ff57b0248126ce5a8ff95507"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/anymatch@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19d386a1d9edc6e7c1c85d388aedbcc56d33602d"
        },
        {
          "alg": "SHA-256",
          "content": "19d386a1d9edc6e7c1c85d388aedbcc56d33602d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        },
        {
          "alg": "SHA-256",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66506c16ce6f4d6928a5b3cd6a33ca41e941e37b"
        },
        {
          "alg": "SHA-256",
          "content": "66506c16ce6f4d6928a5b3cd6a33ca41e941e37b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ed0ad060df3073300c48440373f72d1cc642d78"
        },
        {
          "alg": "SHA-256",
          "content": "4ed0ad060df3073300c48440373f72d1cc642d78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-immediate-shim",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
        },
        {
          "alg": "SHA-256",
          "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-immediate-shim@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-immediate-shim@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "588afb88391d99d6f1bbf1a1e9e2846492fa28f13be3fe4c12c7f6c214ce14dc5b228222c6882ba0b74a62a07a1436afe166af87f959773cddddbd8ac485c2e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fsevents@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Upgrade to fsevents v2 to mitigate potential security issues"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d95bf721ec877e08db276ed3fc6eb78f9083ad46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nan@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.6.39",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ac255ef8ab19efcff00c1a071f6680da7835ca0f7a18dd05486c19b0b334c59118ac4d25db310ca7e145b350c3ad03949586b059393a74c1ca120607cc7cc99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-pre-gyp@0.6.39",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.6.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/node-pre-gyp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-pre-gyp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please upgrade to @mapbox/node-pre-gyp: the non-scoped node-pre-gyp package is deprecated and only the @mapbox scoped package will recieve updates in the future"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ec5eb6a3f6750665159a06a04fc06fb656c48844c5a47012196e3c4a9e80627328856f56d5629ef20bc4087f5abcc3a0d219d7d5d4dc4f89d2d1173c4e4c03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-libc@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/detect-libc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "detect-libc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fcc5b99373571b3d77105785a42dc44c00bbb2a3185fa450139b2b82c493ce02fac34b80cd9ec4c03a6294c4c4ce594e93ceb4ce9313cac08c7964ea49552ae"
        },
        {
          "alg": "SHA-1",
          "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
        },
        {
          "alg": "SHA-256",
          "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/hawk@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "2.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29b89911af7fbe87cd7152571b07565a7db9ade4375777470566d2d3b153177fd339e84b9e6f46121255e13e99bc63e44a1469994a98c27682ae48f49919cfe9"
        },
        {
          "alg": "SHA-1",
          "content": "39c8918ceff5799f83f9492a848f625add0c766f"
        },
        {
          "alg": "SHA-256",
          "content": "39c8918ceff5799f83f9492a848f625add0c766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "type": "library",
      "bom-ref": "pkg:npm/boom@2.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "2.16.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57a630d6b21c615ff826c9e0823054d25e0aafe117869c2a5d1bac10d5355f1eaba34d081cf1d83729c2b814ce6403e5af700098bbdc847f48ecdfd551dbcec1"
        },
        {
          "alg": "SHA-1",
          "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
        },
        {
          "alg": "SHA-256",
          "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "type": "library",
      "bom-ref": "pkg:npm/hoek@2.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1453792b0a6fbd04d34b98563f1ad4f3f404e2441473abb065cae794c04df36b7532002dabc9a7a03c08341972f5376bd36b1e788221b5d17e507d5f781606a2"
        },
        {
          "alg": "SHA-1",
          "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
        },
        {
          "alg": "SHA-256",
          "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edb8153809cf8f75e3aca639efb4bea6e08a18246552b72b11db0c7915e583d1a17f975fff1362eac38d51ae375ab1d47774e324117b3b4e23628898d0555ad0"
        },
        {
          "alg": "SHA-1",
          "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
        },
        {
          "alg": "SHA-256",
          "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/sntp@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb95d9169419118d1c83925ac4bc06c4394a34a631b97c06b7cfce8b75179b9ff8ca6ac9bdef5dd825118adbb1bf7ad2ad5086663e26d54d499474dd70ab7636"
        },
        {
          "alg": "SHA-256",
          "content": "d0d4685afd5415193c8c7505602d0d17cd64474d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nopt@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nopt@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73dd959aae617c1817ca851a1ea17c3f9fbb4c71a3bf102507ae2d9b73e215201c0f0c37e27766ae548e777014681668bad0f05f4747cfd9d4505a03d63130d1"
        },
        {
          "alg": "SHA-256",
          "content": "d0554c2256636e2f56e7c2e5ad183f859428d81f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ba1616cbc4459d8b25f6fdf0a5d9805950939859a08725afa3270515317d22158266c32774bb32b1e0dc45763df1a3d0b4a6e990e86fdfbddd4c6cd86ca906d"
        },
        {
          "alg": "SHA-256",
          "content": "42fe6d5953df06c8064be6f176c3d05aaaa34644"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/osenv@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1ca2522465866df14bdeba20d2d320249088e2775a3b94f1bc7189b4e72358cc19fcca442d6a23cc106a7c7d8f6d29d0e09bca24a5d2b392fbb5cbd85462e80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41b30f23cb5e625641201a838262167c328ed78f5d1ad415da2ba6f169e209a01114545dd5ef88112d4b038b1219c55315d54beb6f3ed7add651bc5ebfb47f69"
        },
        {
          "alg": "SHA-256",
          "content": "bb5dca382bb94f05e15194373d16fd3ba1ca110d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d"
        },
        {
          "alg": "SHA-256",
          "content": "84c6e159b81904fdca59a0ef44cd870d31250f9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8aec6a5fb6fb158b74f00ae26040b152c2bd2935c4dc0fc57a7c486b720f9af00d1f16933ffc06230c1ff8889dbef20393f32c0a9fe8115e80f025e8e120dc0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-shims",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672f195cccb1213e91313798ece3ff6c39dd7e3e9bc026a7ed24bdf02127752e9d787c163e9b1e7879706ab35c0629be7ad5e717d1c17359e89f92600da254d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-shims@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-shims@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31afd74860bc95f0efc3be5e2e3820fdad6758306eb6d79d9a96db3711f946ecabd0886a35738a6c6e3af15b4fa2cae385180d3af8289e6639e199c631d8098f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72bedd6562f039e68504b4c8b997987647ceed4cc620a863604349140c5438c29619a5839b69c9336af3c4d466e4ec2ed031f7029c0da3a931e6275765f6ff23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1"
        },
        {
          "alg": "SHA-256",
          "content": "3d7cf4464db6446ea644bf4b39507f9851008e8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "2.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d78c7892373a9640f796dc39f3d93436b3c3e9c08d4c3e825a855436907ce7e0ebb4e368667f91ba0eb1654e51bd20b8f9364fc40e409c189b41802f667e351e"
        },
        {
          "alg": "SHA-256",
          "content": "2c03405c7538c39d7eb37b317022e325fb018bf7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gauge@2.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/gauge@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1d751972559ee7d190a5cec7f402a7f9bc691eeff5fc413d06125298afca80b84f34b65a9bbca7f8865ac3134ff3a88f19ea3e078c821a07d819e3ce248e3b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aproba@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825"
        },
        {
          "alg": "SHA-256",
          "content": "e0e6fe6a28cf51138855e086d1691e771de2a8b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e40d37293079c57176ed5195830aa50c78fb079f218a66c62ea07b1a3f2806f0aae26b054ac198a609ac4f0a164550000556127c0d76edb53e0ac3efb277c4"
        },
        {
          "alg": "SHA-256",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d17b15a502e75425c725fc84b3cb42d33a53548af93ca2ac42d913dbd230ba99cf4e3b4f990df14ffe32091105f6162457fdccde4cdc513480653e9aea1f35b7"
        },
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        },
        {
          "alg": "SHA-256",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4690152900394fadf1123ebf82221b504b59c09e1414873766dbc4922694111ca5a9ef316f922fa9c80ebab64b6a1bfddc22ca7f1730e5823e0d9714051c8b5c"
        },
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        },
        {
          "alg": "SHA-256",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d69a94a918e484f27d9a236af52c0c7ddbe2ea504971de9e171bdf6a2bd085a1f74a08ac7e2bae76f167b5d28e9b1b9e7bfefb97e14f8caad08d6be63e35ab47"
        },
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        },
        {
          "alg": "SHA-256",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a30cb97243bb3ac7526008bbabe77a2c8e6fd45d4603f7ed0f6d82ab06c622b185f30b137e1c2de6603372fdd59d99fdc0c2ac14dc25f00c2bec36018ad52d3"
        },
        {
          "alg": "SHA-256",
          "content": "571e0f1b0604636ebc0dfc21b0339bbe31341710"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87"
        },
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        },
        {
          "alg": "SHA-256",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e642d5a4ebc587acdd8c62f6f949825ddfe7a273eec6c4633342e4b4f33a0ada4560ead949df6b178b6f79e32daa5dc753a02c028be0a91f24f4740e49f5cb31"
        },
        {
          "alg": "SHA-256",
          "content": "2e03e8e42ee450b8cb3dce65be1bf8974e1dfd95"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/rc@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/rc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "710d225d210a8b72513618d4b0b5af43e3153f12d5aa9c02774705b166c9c650a29b64e50a8d49bcde5668f74fbd2a547449e427f5fe98f19cab9449ebc10af2"
        },
        {
          "alg": "SHA-256",
          "content": "48b699c27e334bf89f10892be432f6e4c7d34a7f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-extend@0.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55403b58058d0967e6ebff1ff6401bf18ea21815a79827e0152e5d4ebbf60b7f0b2e6d4a526a58dfcf260950890ac30a4289af390d685bcfde75774285df595d"
        },
        {
          "alg": "SHA-1",
          "content": "0537cb79daf59b59a1a517dff706c86ec039162e"
        },
        {
          "alg": "SHA-256",
          "content": "0537cb79daf59b59a1a517dff706c86ec039162e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to ini >=1.3.6 to avoid a prototype pollution issue"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed697e273f88196b92760b10109e09ba7574b22fe2321838d8c9d0406ea1d51e9335e55e9e9e14f71e420b9bff818ab3fdf10d2d02130165e274db552f434d6f"
        },
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        },
        {
          "alg": "SHA-256",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2007c9dad3b7de715564388e91b387bb4fa34e4e48b91262fb4d476e4ece9bbb711d9d2c9c9ed549e2b7bc920640fb0c7d22e788d98d756df6e0c2dcee13429"
        },
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        },
        {
          "alg": "SHA-256",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.81.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2199ec47bbe81749a2192bb6f445cf4603d3b84b08ffe6a26cd4816cdd69a65adf6abb45e700d81800f3de20fdbe60557f6af4d2b7245997fc06d4b9924ecd8b"
        },
        {
          "alg": "SHA-1",
          "content": "c6928946a0e06c5f8d6f8a9333469ffda46298a0"
        },
        {
          "alg": "SHA-256",
          "content": "c6928946a0e06c5f8d6f8a9333469ffda46298a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/request@2.81.0",
      "type": "library",
      "bom-ref": "pkg:npm/request@2.81.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "267269012d29f519a2c643af5b65f00f1c73b356dde3f54018897a434102e583a8fa9fa1a8886d0e19ff9e616707fc543576cb92913698e8e0548051283e3163"
        },
        {
          "alg": "SHA-1",
          "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
        },
        {
          "alg": "SHA-256",
          "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6495eab80dff145aeffbc5ffed7dba3bb76bc36b4edb70e3469ca865d105ca42c8777c9d32275339c33a72f01b41484350c3ff554ecb613212c6fb25c77d2b5"
        },
        {
          "alg": "SHA-1",
          "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
        },
        {
          "alg": "SHA-256",
          "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws4@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
        },
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        },
        {
          "alg": "SHA-256",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2604917b89785333f0a49bb17dc3d610ad520ab2f8771363a75baaad02cca29dd0654568fa10d4f30f4124a03824f6ee953588f94ceb236500ded2b5db243a6e"
        },
        {
          "alg": "SHA-1",
          "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
        },
        {
          "alg": "SHA-256",
          "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        },
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        },
        {
          "alg": "SHA-256",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb569449819d010c7282ea0ff75f6ab208f6e24ac30ad68efc324534fc059a88cc98aa75e20b424d5b1cf25412a910c5af001c87e9b13160bcffa6493f3e47a7"
        },
        {
          "alg": "SHA-1",
          "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
        },
        {
          "alg": "SHA-256",
          "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extend@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
        },
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        },
        {
          "alg": "SHA-256",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0758648b00fafe006d21069b2a8b939bf07acb4ad37f2d67aa869165d7877b1498072b8f139a02e800b3f3ebd5d2511eb9609cc37cb517fc133cf8c2c92e085"
        },
        {
          "alg": "SHA-1",
          "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
        },
        {
          "alg": "SHA-256",
          "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/form-data@2.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        },
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        },
        {
          "alg": "SHA-256",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e395e33c7afb0bf8ebecb84e845e89bef1001c49800b8e6c3ebd816a1fc23effec0d95ec1581b33bfced7071d0952ffb5af120ba97a0442bb034fe6672c297e"
        },
        {
          "alg": "SHA-1",
          "content": "a4ebf5064094569237b8cf70046776d09fc92aed"
        },
        {
          "alg": "SHA-256",
          "content": "a4ebf5064094569237b8cf70046776d09fc92aed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.15",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.27.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cd842f743e3564409a4b54ff9cb7496628f416007172fbaed7f0804ec7e99d6bf23dbecadd24eff3a3210975074bb287e2fe5f06006f88b1f0745c23cbc8b1e"
        },
        {
          "alg": "SHA-1",
          "content": "820f572296bbd20ec25ed55e5b5de869e5436eb1"
        },
        {
          "alg": "SHA-256",
          "content": "820f572296bbd20ec25ed55e5b5de869e5436eb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.27.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.27.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.27.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e466e9e9101fb4c61857750423873856fdfe6b8750eed695caf1edfbf2fa911b7e7f81d7d46c1e024e540d63744af7559d1073190e8e1bcf6919a0fdb9216757"
        },
        {
          "alg": "SHA-1",
          "content": "33481d0f1bbff600dd203d75812a6a5fba002e2a"
        },
        {
          "alg": "SHA-256",
          "content": "33481d0f1bbff600dd203d75812a6a5fba002e2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-validator@4.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "this library is no longer supported"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fcc5fd86391e9183073d14f4cb37383007e250dbfccc6ae617496997e5857969c7b1e95a264f4a1c4aec11ec17d7a393291e2fa32feb1a6aec767f0b0624329"
        },
        {
          "alg": "SHA-1",
          "content": "d263135f43307c02c602afc8fe95970c0151369e"
        },
        {
          "alg": "SHA-256",
          "content": "d263135f43307c02c602afc8fe95970c0151369e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-schema@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8949f435c4542e50c6b6a34b3752719b36b293ca209bb353a257404b2641a4cdaa8206e98635f334e8b0de988df2d833f9efc346ce97e600331704c8e8109172"
        },
        {
          "alg": "SHA-1",
          "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
        },
        {
          "alg": "SHA-256",
          "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-signature@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb52f464bcb047388e563521471234420f46fb8467141f47fd1ab8d185a7d1d89e0e03bbbc061e273ea32803bab7f6abbb394314b00f9104d3f3b7be7fc2266b"
        },
        {
          "alg": "SHA-1",
          "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
        },
        {
          "alg": "SHA-256",
          "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b2290b9a6e0a948b64543dab81adf64da026f428da2e95fd43a90d3bad45b6bf36aecd702afee51eee80ecb55ff645abdac469fb35f708fc5da1ac1937f056e"
        },
        {
          "alg": "SHA-1",
          "content": "a3b87e40298d8c380552d8cc7628a0bb95a22918"
        },
        {
          "alg": "SHA-256",
          "content": "a3b87e40298d8c380552d8cc7628a0bb95a22918"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
        },
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        },
        {
          "alg": "SHA-256",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "836d41af810b99568a0954944924d779c286f8c88b7071686f2e513cf5267d9761413a27b5750e3dfd102bf4efade463808b518b23bddbccf14784c2ae7bb098"
        },
        {
          "alg": "SHA-1",
          "content": "e1080e0658e300b06294990cc70e1502235fd550"
        },
        {
          "alg": "SHA-256",
          "content": "e1080e0658e300b06294990cc70e1502235fd550"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7c479c82c632d93e8433aa3701f317a7b67cd6e232b5d9bf1290884bf63258103fea6320ecea0262980f6983a57604ff8e0cee0fa7f69d9b2a46160d471709"
        },
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        },
        {
          "alg": "SHA-256",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bc185630226b790f907c08fa62da3ac34f2fdf6aae0e116f8d90e4cb48a70874f7dd609bd6bf755975d0ca974072bc17ba709dace4c9b65c3b6fe5cda98ff12"
        },
        {
          "alg": "SHA-1",
          "content": "cff5df12946d297d2baaefaa2689e25be01c005c"
        },
        {
          "alg": "SHA-256",
          "content": "cff5df12946d297d2baaefaa2689e25be01c005c"
        }
      ],
      "purl": "pkg:npm/verror@1.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.3.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e298e80a607e56d6baa1d2779eb4f6cdfdb6dfec56ea63897d8b47197ee7e426540159ba1a1b872db29e6a2ddcd17a160aee993723e8dcd7fbd426946e0724da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/sshpk-conv, /app/node_modules/fsevents/node_modules/.bin/sshpk-sign, /app/node_modules/fsevents/node_modules/.bin/sshpk-verify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sshpk-conv, sshpk-sign, sshpk-verify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea2dfbc3ff848655a519425f7f74ff43cbb544698fe7081b8b06273a76ceaafb6b3f14fadffb181723fd45ca71b711b29ad7c0d3be48be63a72fbc9c34e5a5df"
        },
        {
          "alg": "SHA-1",
          "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
        },
        {
          "alg": "SHA-256",
          "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
        },
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        },
        {
          "alg": "SHA-256",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
        },
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        },
        {
          "alg": "SHA-256",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8e2c3ab4a5a703595ec8a77c9d07a5b4a415fb789e14952de52b4388f6c9d1a604e89563cdda3094ad2404c1cb40b7f9775a61af7dd24200d6a902da652aea"
        },
        {
          "alg": "SHA-1",
          "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
        },
        {
          "alg": "SHA-256",
          "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
        },
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        },
        {
          "alg": "SHA-256",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0fbe0f50635e9261a8c42fd5b52e4fbdc8ced708afcc3aadb089bb252d96000041246c020eea62e45be18561bbefc3ca93b8317314c838d2b4bd23190d0963e"
        },
        {
          "alg": "SHA-1",
          "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
        },
        {
          "alg": "SHA-256",
          "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
        },
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        },
        {
          "alg": "SHA-256",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jodid25519",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f66676bfc062324f38b419e9a0dbb25851a4724f20444f0e469eac9540cafbd6ea2339832b8240f6f8fc776c6d99162effcd35172520e81a804e84c8b1abbb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jodid25519@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/jodid25519@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        },
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        },
        {
          "alg": "SHA-256",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
        },
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        },
        {
          "alg": "SHA-256",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        },
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        },
        {
          "alg": "SHA-256",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "565174ee2bb7555dfe0535e3e37366a7a22bb7f1bb8ff36011cb544ba230787d511a15118e309cd8d5adcd714f5d75967dcee181b5d076d890bb62c6a7a33152"
        },
        {
          "alg": "SHA-1",
          "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
        },
        {
          "alg": "SHA-256",
          "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.8.2",
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6079397b3d6198c4792ce91bf622642caaa80652fb583e4cf258c2ef965fcd7ae2b8121536e79c697b94edefa13b0caa7f6e16c6187b57182dec79f0f76f3c4e"
        },
        {
          "alg": "SHA-1",
          "content": "33ef30c5c77d4ea21c5a53869d91b56d8f2555e5"
        },
        {
          "alg": "SHA-256",
          "content": "33ef30c5c77d4ea21c5a53869d91b56d8f2555e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/performance-now@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42ce9d7e04793a4b0afcf4b1975906c626601107bc46a24c07dc19a9594a41f53ecf357e1d8efba56267a0910d002283401c96769afc64f221d53062e25a6249"
        },
        {
          "alg": "SHA-1",
          "content": "13e26d28ad6b0ffaa91312cd3bf708ed351e7233"
        },
        {
          "alg": "SHA-256",
          "content": "13e26d28ad6b0ffaa91312cd3bf708ed351e7233"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41443591384c8cb46de2303c96c9fd97222413d6ca69f13b2c338bfe7041518f537efda2df1d4d02c5471b4b8c0aeb0539679e23a08e858fc5db4f9abf14564b"
        },
        {
          "alg": "SHA-1",
          "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
        },
        {
          "alg": "SHA-256",
          "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e365178e6ce4f3c17b511ca0f700d5fdd950ee15ed97f48357ac48315743abcd9c9c31900f283c988f311813cec2911f6e1beb8dae9c27c1f5c2bd31c7290128"
        },
        {
          "alg": "SHA-1",
          "content": "f081f76e4c85720e6c37a5faced737150d84072a"
        },
        {
          "alg": "SHA-256",
          "content": "f081f76e4c85720e6c37a5faced737150d84072a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        },
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        },
        {
          "alg": "SHA-256",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7284cee28ac724c309b21d515c8d3cc84b3fd1d6cb3f6d1b9d3601c562c81ebbb8f825b851be313e1db729afdcb9c61f9bf87c5e163b93a034f88bd91036bb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028)."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5021c9dd67c6a6d96cac78bea5967feeb65e754b044142cfdab7ece2d549e1b273f265c0080fe8343d9aca75bfa4267d9fa3f0b0832270791f2c3f7e897abe6"
        },
        {
          "alg": "SHA-1",
          "content": "c2338ec643df7a1b7fe5c54fa86f57428a55f33d"
        },
        {
          "alg": "SHA-256",
          "content": "c2338ec643df7a1b7fe5c54fa86f57428a55f33d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/rimraf"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
        },
        {
          "alg": "SHA-256",
          "content": "c19c9df9a028702d678612384a6552404c636d15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        },
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        },
        {
          "alg": "SHA-256",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        },
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        },
        {
          "alg": "SHA-256",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        },
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        },
        {
          "alg": "SHA-256",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        },
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        },
        {
          "alg": "SHA-256",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79b5d70d1d7028ac4935f4ccf3bdadac053986929db82913377ee2a68c6c879ca26d6abc15fc62a1b887b9594f164b29492361af16cf1db338906c8319d2799a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "493c34de640a9c6518b683639a8c28e05d9c466208c5810688cb238f095afeee4fd65c5a763ff4e5690d6858cd88a4e02648fc2a25db8008914e671047040db6"
        },
        {
          "alg": "SHA-256",
          "content": "cb3f3e3c732dc0f01ee70b403f302e61d7709838"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@0.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d93c36b8db59a904d21d320c6ca1ca15e00f98a7258eb34aa8a88837ba6edd5fc2c58a91812f032d7bcc90546b6ed5e583a99339072e4d7ec3323d7c5e2d1db6"
        },
        {
          "alg": "SHA-256",
          "content": "8e4d2a256c0e2185c6b18ad694aec968b83cb1d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/tar@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "block-stream",
      "version": "0.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a8adb9c954f208e03b9429b8c04407bcbbc11fa8e9a4104692148ca843b3a34c79fa91a7f15a5d302e0a19dab5da61deccc8b703694e139a17f1b7081c71c31"
        },
        {
          "alg": "SHA-256",
          "content": "13ebfe778a03205cfe03751481ebb4b3300c126a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/block-stream@0.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/block-stream@0.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9783c5c0ef4bafcab8aa77527a4ffe95ef859e4161c29fae614d201671980a08e0a8ee737a868aa016b60f2c9f58cdbaf2ae9fd522bb875ec0f2648a99d52bd"
        },
        {
          "alg": "SHA-256",
          "content": "5c1fb1f117477114f0632a0eb4b71b3cb0fd3171"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fstream@1.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/fstream@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-pack",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a080494b1d908364ad49f2b1d9a9da89d3dcd8f45f1a5bb0a06e11e35d92827e0554e93a943e133aa24977cfc6d159f3a82410512a820eaf03db6a108757ae3"
        },
        {
          "alg": "SHA-256",
          "content": "23be2d7f671a8339376cbdb0b8fe3fdebf317984"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-pack@3.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/tar-pack@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream-ignore",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55546e3ace35554aa9b441a247437966858471f1af6c646a2c83726408474671770c7e70aea8cd918af755b468667238d416603bbcc855d8a86dcd774d5235a3"
        },
        {
          "alg": "SHA-256",
          "content": "9c31dae34767018fe1d249b24dada67d092da105"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fstream-ignore@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/fstream-ignore@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-number",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "738eb51572258ecc02bac7199faef1abd3e9b3390f4fa46385e585413802c9a6c9ad3528cc495a9dbd1812abf6506824db8ed8a5c264141b9218dbc19695ccf7"
        },
        {
          "alg": "SHA-256",
          "content": "0ea10e8035e8eb5b8e4449f06da1c730663baa81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uid-number@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/uid-number@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c7356436a4d13123be2e2426a05d1dad9cbe65cf"
        },
        {
          "alg": "SHA-256",
          "content": "c7356436a4d13123be2e2426a05d1dad9cbe65cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack-sources@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aaa47403f7b245a92fbc97ea08f250d6087ed085"
        },
        {
          "alg": "SHA-256",
          "content": "aaa47403f7b245a92fbc97ea08f250d6087ed085"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "782ec21ef403345f830a808ca3d513af56065208"
        },
        {
          "alg": "SHA-256",
          "content": "782ec21ef403345f830a808ca3d513af56065208"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-6.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        },
        {
          "alg": "SHA-256",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        },
        {
          "alg": "SHA-256",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
        },
        {
          "alg": "SHA-256",
          "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
        },
        {
          "alg": "SHA-256",
          "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        },
        {
          "alg": "SHA-256",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        },
        {
          "alg": "SHA-256",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        },
        {
          "alg": "SHA-256",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        },
        {
          "alg": "SHA-256",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bba63ca861948994ff307736089e3b96026c2a4f"
        },
        {
          "alg": "SHA-256",
          "content": "bba63ca861948994ff307736089e3b96026c2a4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        },
        {
          "alg": "SHA-256",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
        },
        {
          "alg": "SHA-256",
          "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8defae57c8a52a8a784f9e31c57c742e993a0b9"
        },
        {
          "alg": "SHA-256",
          "content": "c8defae57c8a52a8a784f9e31c57c742e993a0b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        },
        {
          "alg": "SHA-256",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a4b508a8d5bb2d629d447056ff4e9c9314cf3d4"
        },
        {
          "alg": "SHA-256",
          "content": "7a4b508a8d5bb2d629d447056ff4e9c9314cf3d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-remove-strict-mode",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "913685aab95439f3a0ed88e588fbd5e997890579"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-remove-strict-mode@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-remove-strict-mode/-/babel-plugin-transform-remove-strict-mode-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-remove-strict-mode@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-remove-strict-mode/-/babel-plugin-transform-remove-strict-mode-0.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-es2015",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d44050d6bc2c9feea702aaf38d727a0210538939"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-es2015@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-es2015@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.24.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "🙌  Thanks for using Babel: we recommend using babel-preset-env now: please read https://babeljs.io/env to update!"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-check-es2015-constants",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35157b101426fd2ffd3da3f75c7d1e91835bbf8a"
        },
        {
          "alg": "SHA-256",
          "content": "35157b101426fd2ffd3da3f75c7d1e91835bbf8a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-check-es2015-constants/-/babel-plugin-check-es2015-constants-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-check-es2015-constants/-/babel-plugin-check-es2015-constants-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-arrow-functions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "452692cb711d5f79dc7f85e440ce41b9f244d221"
        },
        {
          "alg": "SHA-256",
          "content": "452692cb711d5f79dc7f85e440ce41b9f244d221"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-arrow-functions/-/babel-plugin-transform-es2015-arrow-functions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-arrow-functions/-/babel-plugin-transform-es2015-arrow-functions-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-block-scoped-functions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbc51b49f964d70cb8d8e0b94e820246ce3a6141"
        },
        {
          "alg": "SHA-256",
          "content": "bbc51b49f964d70cb8d8e0b94e820246ce3a6141"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoped-functions/-/babel-plugin-transform-es2015-block-scoped-functions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoped-functions/-/babel-plugin-transform-es2015-block-scoped-functions-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-block-scoping",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "76c295dc3a4741b1665adfd3167215dcff32a576"
        },
        {
          "alg": "SHA-256",
          "content": "76c295dc3a4741b1665adfd3167215dcff32a576"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoping/-/babel-plugin-transform-es2015-block-scoping-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoping/-/babel-plugin-transform-es2015-block-scoping-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-classes",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a4c58a50c9c9461e564b4b2a3bfabc97a2584db"
        },
        {
          "alg": "SHA-256",
          "content": "5a4c58a50c9c9461e564b4b2a3bfabc97a2584db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-classes/-/babel-plugin-transform-es2015-classes-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-classes/-/babel-plugin-transform-es2015-classes-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-define-map",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a9747f258d8947d32d515f6aa1c7bd02204a080"
        },
        {
          "alg": "SHA-256",
          "content": "7a9747f258d8947d32d515f6aa1c7bd02204a080"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-define-map@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-define-map/-/babel-helper-define-map-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-define-map@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-define-map/-/babel-helper-define-map-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-function-name",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3475b8c03ed98242a25b48351ab18399d3580a9"
        },
        {
          "alg": "SHA-256",
          "content": "d3475b8c03ed98242a25b48351ab18399d3580a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-function-name@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-function-name/-/babel-helper-function-name-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-function-name@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-function-name/-/babel-helper-function-name-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-get-function-arity",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f7782aa93407c41d3aa50908f89b031b1b6853d"
        },
        {
          "alg": "SHA-256",
          "content": "8f7782aa93407c41d3aa50908f89b031b1b6853d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-get-function-arity/-/babel-helper-get-function-arity-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-get-function-arity/-/babel-helper-get-function-arity-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-optimise-call-expression",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7a13427ba9f73f8f4fa993c54a97882d1244257"
        },
        {
          "alg": "SHA-256",
          "content": "f7a13427ba9f73f8f4fa993c54a97882d1244257"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-optimise-call-expression/-/babel-helper-optimise-call-expression-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-optimise-call-expression/-/babel-helper-optimise-call-expression-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-replace-supers",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf6dbfe43938d17369a213ca8a8bf74b6a90ab1a"
        },
        {
          "alg": "SHA-256",
          "content": "bf6dbfe43938d17369a213ca8a8bf74b6a90ab1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-replace-supers/-/babel-helper-replace-supers-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-replace-supers/-/babel-helper-replace-supers-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-computed-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6fe2a8d16895d5634f4cd999b6d3480a308159b3"
        },
        {
          "alg": "SHA-256",
          "content": "6fe2a8d16895d5634f4cd999b6d3480a308159b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-computed-properties/-/babel-plugin-transform-es2015-computed-properties-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-computed-properties/-/babel-plugin-transform-es2015-computed-properties-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-destructuring",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "997bb1f1ab967f682d2b0876fe358d60e765c56d"
        },
        {
          "alg": "SHA-256",
          "content": "997bb1f1ab967f682d2b0876fe358d60e765c56d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-destructuring/-/babel-plugin-transform-es2015-destructuring-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-destructuring/-/babel-plugin-transform-es2015-destructuring-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-duplicate-keys",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73eb3d310ca969e3ef9ec91c53741a6f1576423e"
        },
        {
          "alg": "SHA-256",
          "content": "73eb3d310ca969e3ef9ec91c53741a6f1576423e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-duplicate-keys/-/babel-plugin-transform-es2015-duplicate-keys-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-duplicate-keys/-/babel-plugin-transform-es2015-duplicate-keys-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-for-of",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f47c95b2b613df1d3ecc2fdb7573623c75248691"
        },
        {
          "alg": "SHA-256",
          "content": "f47c95b2b613df1d3ecc2fdb7573623c75248691"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-for-of/-/babel-plugin-transform-es2015-for-of-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-for-of/-/babel-plugin-transform-es2015-for-of-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-function-name",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "834c89853bc36b1af0f3a4c5dbaa94fd8eacaa8b"
        },
        {
          "alg": "SHA-256",
          "content": "834c89853bc36b1af0f3a4c5dbaa94fd8eacaa8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-function-name/-/babel-plugin-transform-es2015-function-name-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-function-name/-/babel-plugin-transform-es2015-function-name-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-literals",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f54a02d6cd66cf915280019a31d31925377ca2e"
        },
        {
          "alg": "SHA-256",
          "content": "4f54a02d6cd66cf915280019a31d31925377ca2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-literals/-/babel-plugin-transform-es2015-literals-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-literals/-/babel-plugin-transform-es2015-literals-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-amd",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b3e54017239842d6d19c3011c4bd2f00a00d154"
        },
        {
          "alg": "SHA-256",
          "content": "3b3e54017239842d6d19c3011c4bd2f00a00d154"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-amd/-/babel-plugin-transform-es2015-modules-amd-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-amd/-/babel-plugin-transform-es2015-modules-amd-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-commonjs",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3e310b40ef664a36622200097c6d440298f2bfe"
        },
        {
          "alg": "SHA-256",
          "content": "d3e310b40ef664a36622200097c6d440298f2bfe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-strict-mode",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5faf7aa578a65bbe591cf5edae04a0c67020758"
        },
        {
          "alg": "SHA-256",
          "content": "d5faf7aa578a65bbe591cf5edae04a0c67020758"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-strict-mode/-/babel-plugin-transform-strict-mode-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-strict-mode/-/babel-plugin-transform-strict-mode-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-systemjs",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff89a142b9119a906195f5f106ecf305d9407d23"
        },
        {
          "alg": "SHA-256",
          "content": "ff89a142b9119a906195f5f106ecf305d9407d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-systemjs/-/babel-plugin-transform-es2015-modules-systemjs-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-systemjs/-/babel-plugin-transform-es2015-modules-systemjs-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-hoist-variables",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ecb27689c9d25513eadbc9914a73f5408be7a76"
        },
        {
          "alg": "SHA-256",
          "content": "1ecb27689c9d25513eadbc9914a73f5408be7a76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-hoist-variables/-/babel-helper-hoist-variables-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-hoist-variables/-/babel-helper-hoist-variables-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-umd",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac997e6285cd18ed6176adb607d602344ad38468"
        },
        {
          "alg": "SHA-256",
          "content": "ac997e6285cd18ed6176adb607d602344ad38468"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-umd/-/babel-plugin-transform-es2015-modules-umd-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-umd/-/babel-plugin-transform-es2015-modules-umd-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-object-super",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24cef69ae21cb83a7f8603dad021f572eb278f8d"
        },
        {
          "alg": "SHA-256",
          "content": "24cef69ae21cb83a7f8603dad021f572eb278f8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-object-super/-/babel-plugin-transform-es2015-object-super-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-object-super/-/babel-plugin-transform-es2015-object-super-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-parameters",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57ac351ab49caf14a97cd13b09f66fdf0a625f2b"
        },
        {
          "alg": "SHA-256",
          "content": "57ac351ab49caf14a97cd13b09f66fdf0a625f2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-parameters/-/babel-plugin-transform-es2015-parameters-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-parameters/-/babel-plugin-transform-es2015-parameters-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-call-delegate",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ece6aacddc76e41c3461f88bfc575bd0daa2df8d"
        },
        {
          "alg": "SHA-256",
          "content": "ece6aacddc76e41c3461f88bfc575bd0daa2df8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-call-delegate/-/babel-helper-call-delegate-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-call-delegate/-/babel-helper-call-delegate-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-shorthand-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24f875d6721c87661bbd99a4622e51f14de38aa0"
        },
        {
          "alg": "SHA-256",
          "content": "24f875d6721c87661bbd99a4622e51f14de38aa0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-shorthand-properties/-/babel-plugin-transform-es2015-shorthand-properties-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-shorthand-properties/-/babel-plugin-transform-es2015-shorthand-properties-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-spread",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6d68a99f89aedc4536c81a542e8dd9f1746f8d1"
        },
        {
          "alg": "SHA-256",
          "content": "d6d68a99f89aedc4536c81a542e8dd9f1746f8d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-spread/-/babel-plugin-transform-es2015-spread-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-spread/-/babel-plugin-transform-es2015-spread-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-sticky-regex",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c1cdb1aca71112cdf0cf6126c2ed6b457ccdbc"
        },
        {
          "alg": "SHA-256",
          "content": "00c1cdb1aca71112cdf0cf6126c2ed6b457ccdbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-sticky-regex/-/babel-plugin-transform-es2015-sticky-regex-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-sticky-regex/-/babel-plugin-transform-es2015-sticky-regex-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-regex",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d36e22fab1008d79d88648e32116868128456ce8"
        },
        {
          "alg": "SHA-256",
          "content": "d36e22fab1008d79d88648e32116868128456ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-regex@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-regex/-/babel-helper-regex-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-regex@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-regex/-/babel-helper-regex-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-template-literals",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a84b3450f7e9f8f1f6839d6d687da84bb1236d8d"
        },
        {
          "alg": "SHA-256",
          "content": "a84b3450f7e9f8f1f6839d6d687da84bb1236d8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-template-literals/-/babel-plugin-transform-es2015-template-literals-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-template-literals/-/babel-plugin-transform-es2015-template-literals-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-typeof-symbol",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dec09f1cddff94b52ac73d505c84df59dcceb372"
        },
        {
          "alg": "SHA-256",
          "content": "dec09f1cddff94b52ac73d505c84df59dcceb372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-typeof-symbol/-/babel-plugin-transform-es2015-typeof-symbol-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-typeof-symbol/-/babel-plugin-transform-es2015-typeof-symbol-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-unicode-regex",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d38b12f42ea7323f729387f18a7c5ae1faeb35e9"
        },
        {
          "alg": "SHA-256",
          "content": "d38b12f42ea7323f729387f18a7c5ae1faeb35e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-unicode-regex/-/babel-plugin-transform-es2015-unicode-regex-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-unicode-regex/-/babel-plugin-transform-es2015-unicode-regex-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49d038837b8dcf8bfa5b9a42139938e6ea2ae240"
        },
        {
          "alg": "SHA-256",
          "content": "49d038837b8dcf8bfa5b9a42139938e6ea2ae240"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexpu-core@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1941c67bad437e1be76433add5b385f95b19260"
        },
        {
          "alg": "SHA-256",
          "content": "d1941c67bad437e1be76433add5b385f95b19260"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerate@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate/-/regenerate-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate/-/regenerate-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsgen",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c016adeac554f75823fe37ac05b92d5a4edb1f7"
        },
        {
          "alg": "SHA-256",
          "content": "6c016adeac554f75823fe37ac05b92d5a4edb1f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regjsgen@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsgen@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsparser",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ee8f84dc6fa792d3fd0ae228d24bd949ead205c"
        },
        {
          "alg": "SHA-256",
          "content": "7ee8f84dc6fa792d3fd0ae228d24bd949ead205c"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regjsparser@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsparser@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/regjsparser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "regjsparser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7dee66e35d6fc16f710fe91d5cf69f70f08911d"
        },
        {
          "alg": "SHA-256",
          "content": "e7dee66e35d6fc16f710fe91d5cf69f70f08911d"
        }
      ],
      "purl": "pkg:npm/jsesc@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/regjsparser/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-regenerator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b8da305ad43c3c99b4848e4fe4037b770d23c418"
        },
        {
          "alg": "SHA-256",
          "content": "b8da305ad43c3c99b4848e4fe4037b770d23c418"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-regenerator/-/babel-plugin-transform-regenerator-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-regenerator/-/babel-plugin-transform-regenerator-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-transform",
      "version": "0.9.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a7d067520cb7b7176769eb5ff868691befe1283"
        },
        {
          "alg": "SHA-256",
          "content": "3a7d067520cb7b7176769eb5ff868691befe1283"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-transform@0.9.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.9.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-transform@0.9.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.9.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-react",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba69dfaea45fc3ec639b6a4ecea6e17702c91380"
        },
        {
          "alg": "SHA-256",
          "content": "ba69dfaea45fc3ec639b6a4ecea6e17702c91380"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-react@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-react/-/babel-preset-react-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-react@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-react/-/babel-preset-react-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-jsx",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0af32a9a6e13ca7a3fd5069e62d7b0f58d0d8946"
        },
        {
          "alg": "SHA-256",
          "content": "0af32a9a6e13ca7a3fd5069e62d7b0f58d0d8946"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-jsx/-/babel-plugin-syntax-jsx-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-jsx/-/babel-plugin-syntax-jsx-6.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-display-name",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67e2bf1f1e9c93ab08db96792e05392bf2cc28d1"
        },
        {
          "alg": "SHA-256",
          "content": "67e2bf1f1e9c93ab08db96792e05392bf2cc28d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-display-name/-/babel-plugin-transform-react-display-name-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-display-name/-/babel-plugin-transform-react-display-name-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "840a028e7df460dfc3a2d29f0c0d91f6376e66a3"
        },
        {
          "alg": "SHA-256",
          "content": "840a028e7df460dfc3a2d29f0c0d91f6376e66a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx/-/babel-plugin-transform-react-jsx-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx/-/babel-plugin-transform-react-jsx-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-builder-react-jsx",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ad7917e33c8d751e646daca4e77cc19377d2cbc"
        },
        {
          "alg": "SHA-256",
          "content": "0ad7917e33c8d751e646daca4e77cc19377d2cbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-builder-react-jsx@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-builder-react-jsx/-/babel-helper-builder-react-jsx-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-builder-react-jsx@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-builder-react-jsx/-/babel-helper-builder-react-jsx-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx-self",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df6d80a9da2612a121e6ddd7558bcbecf06e636e"
        },
        {
          "alg": "SHA-256",
          "content": "df6d80a9da2612a121e6ddd7558bcbecf06e636e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-self/-/babel-plugin-transform-react-jsx-self-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-self/-/babel-plugin-transform-react-jsx-self-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx-source",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66ac12153f5cd2d17b3c19268f4bf0197f44ecd6"
        },
        {
          "alg": "SHA-256",
          "content": "66ac12153f5cd2d17b3c19268f4bf0197f44ecd6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-source/-/babel-plugin-transform-react-jsx-source-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-source/-/babel-plugin-transform-react-jsx-source-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-flow",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e71218887085ae9a24b5be4169affb599816c49d"
        },
        {
          "alg": "SHA-256",
          "content": "e71218887085ae9a24b5be4169affb599816c49d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-flow@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-flow/-/babel-preset-flow-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-flow@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-flow/-/babel-preset-flow-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-flow-strip-types",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84cb672935d43714fdc32bce84568d87441cf7cf"
        },
        {
          "alg": "SHA-256",
          "content": "84cb672935d43714fdc32bce84568d87441cf7cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-flow-strip-types/-/babel-plugin-transform-flow-strip-types-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-flow-strip-types/-/babel-plugin-transform-flow-strip-types-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-flow",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c3ab20a2af26aa20cd25995c398c4eb70310c8d"
        },
        {
          "alg": "SHA-256",
          "content": "4c3ab20a2af26aa20cd25995c398c4eb70310c8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-flow/-/babel-plugin-syntax-flow-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-flow/-/babel-plugin-syntax-flow-6.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enzyme",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8b8fdd0713773a260b6985ade461f07f993743d46356a9287babc01c03c77efc2449a23453fb7c80047a8aa5f471ef5a9e1000a3baf5d4dc4bb950ffffa7f98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/enzyme@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enzyme/-/enzyme-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enzyme@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enzyme/-/enzyme-3.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "1.0.0-rc.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b9f53a81b27e4d5dac31c0ffd0cfa03cc6830db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cheerio@1.0.0-rc.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@1.0.0-rc.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b3a110539c5355f1cd8d314623e870b121ec858"
        },
        {
          "alg": "SHA-256",
          "content": "2b3a110539c5355f1cd8d314623e870b121ec858"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-like",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/css-select@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
        },
        {
          "alg": "SHA-256",
          "content": "68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9467d032c38cfaefb9f2d79501253062f87fa1bd"
        },
        {
          "alg": "SHA-256",
          "content": "9467d032c38cfaefb9f2d79501253062f87fa1bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-like",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/css-what@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf"
        },
        {
          "alg": "SHA-256",
          "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf"
        }
      ],
      "purl": "pkg:npm/domutils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "073c697546ce0780ce23be4a28e293e40bc30c82"
        },
        {
          "alg": "SHA-256",
          "content": "073c697546ce0780ce23be4a28e293e40bc30c82"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd28773e2642881aec51544924299c5cd822185b"
        },
        {
          "alg": "SHA-256",
          "content": "bd28773e2642881aec51544924299c5cd822185b"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"
        },
        {
          "alg": "SHA-256",
          "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-like",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/entities@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2"
        },
        {
          "alg": "SHA-256",
          "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "update to domelementtype@1.3.1"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9929acdf628fc2c41098deab82ac580cf149aae4"
        },
        {
          "alg": "SHA-256",
          "content": "9929acdf628fc2c41098deab82ac580cf149aae4"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nth-check@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bdf87acca0f3f9e53fa4fcceb0f4b4cbb00b338"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "892e47000a99be55bbf3774ffea0561d8879c259"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domhandler@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse5",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae03bd660e4b2cb91f245f44e820a65e5484e1455c7a5a32b3c26b16a09c1e5a02deeb1dfe4242c8f0f01f648e9738b1da3df168ff6c517ddef3e92f92e95e00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse5@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5/-/parse5-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5/-/parse5-3.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "8.0.51",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "125dfe5899360ffa6958d7765f4e5a88fe65da4e04c05ecac217a49d0665b3e236e9e4880a8591851209e7a8c6830d9da8d190e4bb4d6a39815366a34b6f04bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@8.0.51",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-8.0.51.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@8.0.51",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-8.0.51.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function.prototype.name",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0099ae5572e9dd6f03c97d023fd92bcc5e639eac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function.prototype.name@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function.prototype.name@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83a73f2fea569898fb737193c8f873caf6d45c94"
        },
        {
          "alg": "SHA-256",
          "content": "83a73f2fea569898fb737193c8f873caf6d45c94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreach",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99"
        },
        {
          "alg": "SHA-256",
          "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreach@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreach@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c54601778ad560f1142ce0e01bcca8b56d13426d"
        },
        {
          "alg": "SHA-256",
          "content": "c54601778ad560f1142ce0e01bcca8b56d13426d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "16176714c801798e4e8f2cf7f7529467bb4a5771"
        },
        {
          "alg": "SHA-256",
          "content": "16176714c801798e4e8f2cf7f7529467bb4a5771"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86eb75392805ddc33af71c92a0eedf74ee7604b2"
        },
        {
          "alg": "SHA-256",
          "content": "86eb75392805ddc33af71c92a0eedf74ee7604b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-subset",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a59117d932de1de00f245fcdd39ce43f1e939a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-subset@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-subset/-/is-subset-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-subset@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-subset/-/is-subset-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-is",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0aa60ec9989a0b3ed795cf4d06f62cf1ad6539b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-is@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-is/-/object-is-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-is@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-is/-/object-is-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.assign",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b1c9cc044ef1b9fe63606fc141abbb32e14730cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.entries",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bf9a4dd2288f5b33f3a993d257661f05d161a5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.entries@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.entries/-/object.entries-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.entries@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.entries/-/object.entries-1.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dfade774e01bfcd97f96180298c449c8623fb94c"
        },
        {
          "alg": "SHA-256",
          "content": "dfade774e01bfcd97f96180298c449c8623fb94c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45355248a88979034b6792e19bb81f2b7975dd0d"
        },
        {
          "alg": "SHA-256",
          "content": "45355248a88979034b6792e19bb81f2b7975dd0d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        },
        {
          "alg": "SHA-256",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3cc59f00025194b6ab2e38dbae6689256b660572"
        },
        {
          "alg": "SHA-256",
          "content": "3cc59f00025194b6ab2e38dbae6689256b660572"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        },
        {
          "alg": "SHA-256",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8461733f538b0837c9361e39a9ab9e9704dc2f28"
        },
        {
          "alg": "SHA-256",
          "content": "8461733f538b0837c9361e39a9ab9e9704dc2f28"
        }
      ],
      "purl": "pkg:npm/has@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.values",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e524da09b4f66ff05df457546ec72ac99f13069a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.values@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.values/-/object.values-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.values@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.values/-/object.values-1.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raf",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a433ff34c4405e84dfae109fc9f484c0900a2dac4153d780a4c7813c1d53903a2e666bcf7ab202955f254c077eb85f1989369597af5ed450b142b01dfd54e31b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/raf@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raf/-/raf-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raf@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raf/-/raf-3.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rst-selector-parser",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81b230ea2fcc6066c89e3472de794285d9b03d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rst-selector-parser@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rst-selector-parser/-/rst-selector-parser-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rst-selector-parser@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rst-selector-parser/-/rst-selector-parser-2.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "lodash.flattendeep",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb030917f86a3134e5bc9bec0d69e0013ddfedb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.flattendeep@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nearley",
      "version": "2.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "725aaa844b8fd1908943ce57bf623fe28d86b3f7ef491e9f0a0e591d513673c7af5b2364d86fbe8a1e0938ede531bfe4ff4f71ea2850da7cca52507f00f0968e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nearley@2.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nearley/-/nearley-2.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nearley@2.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nearley/-/nearley-2.11.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/nearley-railroad, /app/node_modules/.bin/nearley-test, /app/node_modules/.bin/nearley-unparse, /app/node_modules/.bin/nearleyc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nearley-railroad, nearley-test, nearley-unparse, nearleyc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nomnom",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84a66a260174408fc5b77a18f888eccc44fb6971"
        }
      ],
      "purl": "pkg:npm/nomnom@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nomnom/-/nomnom-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nomnom@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nomnom/-/nomnom-1.6.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Package no longer supported. Contact support@npmjs.com for more info."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d0023eaeb154e8ee9fce75dcb923d0ed1667774"
        }
      ],
      "purl": "pkg:npm/colors@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61a6a32010622afa07963bf325203cf12239d604"
        }
      ],
      "purl": "pkg:npm/underscore@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "railroad-diagrams",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb7e6267548ddedfb899c1b90e57374559cddb7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/railroad-diagrams@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/railroad-diagrams@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randexp",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randexp@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randexp@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "discontinuous-range",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e38331f0844bba49b9a9cb71c771585aab1bc65a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/discontinuous-range@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/discontinuous-range@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ret",
      "version": "0.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enzyme-adapter-react-15",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b143e6586e8e98170c2968b73d2cbc80c2cc7e1756aeeb6f3ffa1c13c775d5d8e8aebc71b25a00bfaf50002b51e50d18ee8f37f0c0c3594dcfc9c648c8b9856"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/enzyme-adapter-react-15@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enzyme-adapter-react-15/-/enzyme-adapter-react-15-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enzyme-adapter-react-15@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enzyme-adapter-react-15/-/enzyme-adapter-react-15-1.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-test-renderer",
      "version": "15.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "026f4a5bb5552661fd2cc4bbcd0d4bc8a35ebf7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-test-renderer@15.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-test-renderer/-/react-test-renderer-15.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-test-renderer@15.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-test-renderer/-/react-test-renderer-15.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "enzyme-adapter-utils",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d4e359c489397b3b6249bd103b26808c8640d8456f66400822cbaed8cfd06a4e244ffe5770b89617f069289b62e58a12886fdc32f7a203b9ac91dd142ca5236"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/enzyme-adapter-utils@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enzyme-adapter-utils/-/enzyme-adapter-utils-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enzyme-adapter-utils@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enzyme-adapter-utils/-/enzyme-adapter-utils-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "3.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8fc6201c7f40dd08941b87c085767386a679acc"
        },
        {
          "alg": "SHA-256",
          "content": "c8fc6201c7f40dd08941b87c085767386a679acc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint@3.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-3.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@3.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-3.19.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/eslint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "eslint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version is no longer supported. Please see https://eslint.org/version-support for other options."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0aac662fd52be78964d5532f694784e70110acf7"
        },
        {
          "alg": "SHA-256",
          "content": "0aac662fd52be78964d5532f694784e70110acf7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        },
        {
          "alg": "SHA-256",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c73d8d2909d22291e1a007a395804da8b665fe63"
        },
        {
          "alg": "SHA-256",
          "content": "c73d8d2909d22291e1a007a395804da8b665fe63"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/doctrine@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escope",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e01975e812781a163a6dadfdd80398dc64c889c3"
        },
        {
          "alg": "SHA-256",
          "content": "e01975e812781a163a6dadfdd80398dc64c889c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escope@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escope@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-map",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9136e0503dcc06a301690f0bb14ff4e364e949f0"
        },
        {
          "alg": "SHA-256",
          "content": "9136e0503dcc06a301690f0bb14ff4e364e949f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-map@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-map@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
        },
        {
          "alg": "SHA-256",
          "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/d@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a55877c9924bc0c8d9bd3c2cbe17495ac1709b14"
        },
        {
          "alg": "SHA-256",
          "content": "a55877c9924bc0c8d9bd3c2cbe17495ac1709b14"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.24.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e319c9f0453bf575d374940a655920e59ca5512"
        },
        {
          "alg": "SHA-256",
          "content": "8e319c9f0453bf575d374940a655920e59ca5512"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
        },
        {
          "alg": "SHA-256",
          "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-set",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2b3ec5d4d800ced818db538d28974db0a73ccb1"
        },
        {
          "alg": "SHA-256",
          "content": "d2b3ec5d4d800ced818db538d28974db0a73ccb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-set@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-set@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
        },
        {
          "alg": "SHA-256",
          "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
        },
        {
          "alg": "SHA-256",
          "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa9568d98d3823f9a41d91e902dcab9ea6e5b163"
        },
        {
          "alg": "SHA-256",
          "content": "fa9568d98d3823f9a41d91e902dcab9ea6e5b163"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
        },
        {
          "alg": "SHA-256",
          "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "3.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2910b5ccd49ce893c2ffffaab4fd8b3a31b82374"
        },
        {
          "alg": "SHA-256",
          "content": "2910b5ccd49ce893c2ffffaab4fd8b3a31b82374"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/espree@3.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-3.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-3.4.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
        },
        {
          "alg": "SHA-256",
          "content": "afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
        },
        {
          "alg": "SHA-256",
          "content": "45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/acorn-jsx/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack-stream/node_modules/.bin/acorn"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esquery",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfba8b57d7fba93f17298a8a006a04cda13d80fa"
        },
        {
          "alg": "SHA-256",
          "content": "cfba8b57d7fba93f17298a8a006a04cda13d80fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-entry-cache",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c392990c3e684783d838b8c84a45d8a048458361"
        },
        {
          "alg": "SHA-256",
          "content": "c392990c3e684783d838b8c84a45d8a048458361"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat-cache",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa86714e72c21db88601761ecf2f555d1abc6b96"
        },
        {
          "alg": "SHA-256",
          "content": "fa86714e72c21db88601761ecf2f555d1abc6b96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "circular-json",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5192b7341c7631c6be6f92ec1bb6d8d7cde91d6b79635c6db383f73f3ec4353c0656724e5166d16f7a1c8ef5fb871f6dabfc9301d7255e6f6c677f2036e7a6e0"
        },
        {
          "alg": "SHA-256",
          "content": "815c99ea84f6809529d2f45791bdf82711352d66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/circular-json@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/circular-json@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "CircularJSON is in maintenance only, flatted is its successor."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c12c981d067846c84bcaf862cff930d907ffd1a8"
        },
        {
          "alg": "SHA-256",
          "content": "c12c981d067846c84bcaf862cff930d907ffd1a8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/del@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-2.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ebd84667ca0dbb330b99bcfc68eac2bc54370e0d"
        },
        {
          "alg": "SHA-256",
          "content": "ebd84667ca0dbb330b99bcfc68eac2bc54370e0d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globby@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a34410e4f4e3da23dea375be5be70f24778ec39"
        },
        {
          "alg": "SHA-256",
          "content": "9a34410e4f4e3da23dea375be5be70f24778ec39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        },
        {
          "alg": "SHA-256",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d225ec23132e89edd38fda767472e62e65f1106d"
        },
        {
          "alg": "SHA-256",
          "content": "d225ec23132e89edd38fda767472e62e65f1106d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6477582b8214d602346094567003be8a9eac04dc"
        },
        {
          "alg": "SHA-256",
          "content": "6477582b8214d602346094567003be8a9eac04dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc06e5a1683fbda13de667aff717bbc10a48f37f"
        },
        {
          "alg": "SHA-256",
          "content": "fc06e5a1683fbda13de667aff717bbc10a48f37f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-inside@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        },
        {
          "alg": "SHA-256",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        }
      ],
      "licenses": [
        {
          "expression": "WTFPL OR MIT"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fc03828e264cea3fe91455476f7a3c566cb0757"
        },
        {
          "alg": "SHA-256",
          "content": "5fc03828e264cea3fe91455476f7a3c566cb0757"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write/-/write-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write/-/write-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "3.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "432352e57accd87ab3110e82d3fea0e47812156d"
        },
        {
          "alg": "SHA-256",
          "content": "432352e57accd87ab3110e82d3fea0e47812156d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore@3.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-3.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@3.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-3.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        },
        {
          "alg": "SHA-256",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ef2bfd63504df0bc75785fff8c2c41df12f077e"
        },
        {
          "alg": "SHA-256",
          "content": "1ef2bfd63504df0bc75785fff8c2c41df12f077e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inquirer@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-0.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3a8a83b319aa67793662b13e761c7911422306e"
        },
        {
          "alg": "SHA-256",
          "content": "d3a8a83b319aa67793662b13e761c7911422306e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-escapes@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64da3f7d56a54412e59794bd62dc35295e8f2987"
        },
        {
          "alg": "SHA-256",
          "content": "64da3f7d56a54412e59794bd62dc35295e8f2987"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-cursor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34661f46886327fed2991479152252df92daa541"
        },
        {
          "alg": "SHA-256",
          "content": "34661f46886327fed2991479152252df92daa541"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/restore-cursor@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit-hook",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f05ca233b48c05d54fff07765df8507e95c02ff8"
        },
        {
          "alg": "SHA-256",
          "content": "f05ca233b48c05d54fff07765df8507e95c02ff8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/exit-hook@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit-hook@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
        },
        {
          "alg": "SHA-256",
          "content": "a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onetime@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b234ca209b29ef66fc518d9b98d5847b00edf00a"
        },
        {
          "alg": "SHA-256",
          "content": "b234ca209b29ef66fc518d9b98d5847b00edf00a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-width@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
        },
        {
          "alg": "SHA-256",
          "content": "cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/figures@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readline2",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41059608ffc154757b715d9989d199ffbf372e35"
        },
        {
          "alg": "SHA-256",
          "content": "41059608ffc154757b715d9989d199ffbf372e35"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readline2@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readline2/-/readline2-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readline2@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readline2/-/readline2-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8fbfabb0a98a253d3184331f9e8deb7372fac6c0"
        },
        {
          "alg": "SHA-256",
          "content": "8fbfabb0a98a253d3184331f9e8deb7372fac6c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8ad4a5e110661e402a7d21b530e009f25f8e389"
        },
        {
          "alg": "SHA-256",
          "content": "c8ad4a5e110661e402a7d21b530e009f25f8e389"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/run-async@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-async@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx-lite",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19ce502ca572665f3b647b10939f97fd1615f102"
        },
        {
          "alg": "SHA-256",
          "content": "19ce502ca572665f3b647b10939f97fd1615f102"
        }
      ],
      "purl": "pkg:npm/rx-lite@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx-lite/-/rx-lite-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx-lite@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx-lite/-/rx-lite-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        },
        {
          "alg": "SHA-256",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-my-json-valid",
      "version": "2.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f079dd9bfdae65ee2038aae8acbc86ab109e3693"
        },
        {
          "alg": "SHA-256",
          "content": "f079dd9bfdae65ee2038aae8acbc86ab109e3693"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-my-json-valid@2.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-my-json-valid@2.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.16.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "catastrophic backtracking in regexes could potentially lead to REDOS attack, upgrade to 2.17.2 as soon as possible"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "generate-function",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6858fe7c0969b7d4e9093337647ac79f60dfbe74"
        },
        {
          "alg": "SHA-256",
          "content": "6858fe7c0969b7d4e9093337647ac79f60dfbe74"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/generate-function@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/generate-function/-/generate-function-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generate-function@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/generate-function/-/generate-function-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "generate-object-property",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c0e1c40308ce804f4783618b937fa88f99d50d0"
        },
        {
          "alg": "SHA-256",
          "content": "9c0e1c40308ce804f4783618b937fa88f99d50d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/generate-object-property@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generate-object-property@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-property",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57fe1c4e48474edd65b09911f26b1cd4095dda84"
        },
        {
          "alg": "SHA-256",
          "content": "57fe1c4e48474edd65b09911f26b1cd4095dda84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-property@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-property@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonpointer",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fd92cb34e0e9db3c89c8622ecf51f9b978c6cb9"
        },
        {
          "alg": "SHA-256",
          "content": "4fd92cb34e0e9db3c89c8622ecf51f9b978c6cb9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonpointer@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonpointer@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-resolvable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8df57c61ea2e3c501408d100fb013cf8d6e0cc62"
        },
        {
          "alg": "SHA-256",
          "content": "8df57c61ea2e3c501408d100fb013cf8d6e0cc62"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-resolvable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-resolvable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tryit",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "393be730a9446fd1ead6da59a014308f36c289cb"
        },
        {
          "alg": "SHA-256",
          "content": "393be730a9446fd1ead6da59a014308f36c289cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tryit@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tryit/-/tryit-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tryit@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tryit/-/tryit-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0ba143442d7e12fa2a1f093f1fe2e10722244147e7360083720bca9159f0ba40daee2edc5565125a3dcbbfc70320148803c45db9b461da0e3bf1cc908d13dcb"
        },
        {
          "alg": "SHA-256",
          "content": "4ffbbf25c2ac963b8299dc74da7e3740de1c18ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.9.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
        },
        {
          "alg": "SHA-256",
          "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        },
        {
          "alg": "SHA-256",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4499eddcd1110e0b218bacf2fa7f7f59f55ca804"
        },
        {
          "alg": "SHA-256",
          "content": "4499eddcd1110e0b218bacf2fa7f7f59f55ca804"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee"
        },
        {
          "alg": "SHA-256",
          "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/levn@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21932a549f5e52ffd9a827f570e04be62a97da54"
        },
        {
          "alg": "SHA-256",
          "content": "21932a549f5e52ffd9a827f570e04be62a97da54"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5884cab512cf1d355e3fb784f30804b2b520db72"
        },
        {
          "alg": "SHA-256",
          "content": "5884cab512cf1d355e3fb784f30804b2b520db72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
        },
        {
          "alg": "SHA-256",
          "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
        },
        {
          "alg": "SHA-256",
          "content": "364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
        },
        {
          "alg": "SHA-256",
          "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
        },
        {
          "alg": "SHA-256",
          "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27584810891456a4171c8d0226441ade90cbcaeb"
        },
        {
          "alg": "SHA-256",
          "content": "27584810891456a4171c8d0226441ade90cbcaeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pluralize",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1a21483fd22bb41e58a12fa3421823140897c45"
        },
        {
          "alg": "SHA-256",
          "content": "d1a21483fd22bb41e58a12fa3421823140897c45"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pluralize@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pluralize/-/pluralize-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pluralize@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pluralize/-/pluralize-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e260c78f6161cdd9b0e56cc3e0a85de17c7a57be"
        },
        {
          "alg": "SHA-256",
          "content": "e260c78f6161cdd9b0e56cc3e0a85de17c7a57be"
        }
      ],
      "purl": "pkg:npm/progress@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-uncached",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e0d56d6c9662fd31e43011c4b95aa49955421d3"
        },
        {
          "alg": "SHA-256",
          "content": "4e0d56d6c9662fd31e43011c4b95aa49955421d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-uncached@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-uncached@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caller-path",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "94085ef63581ecd3daa92444a8fe94e82577751f"
        },
        {
          "alg": "SHA-256",
          "content": "94085ef63581ecd3daa92444a8fe94e82577751f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caller-path@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caller-path@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "afab96262910a7f33c19a5775825c69f34e350ca"
        },
        {
          "alg": "SHA-256",
          "content": "afab96262910a7f33c19a5775825c69f34e350ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/callsites@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
        },
        {
          "alg": "SHA-256",
          "content": "26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.7.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "decbcf874b0d1e5fb72e14b164a9683048e9acb3"
        },
        {
          "alg": "SHA-256",
          "content": "decbcf874b0d1e5fb72e14b164a9683048e9acb3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shelljs@0.7.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.7.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        },
        {
          "alg": "SHA-256",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "655907c3469a8680dc2de3a275a8fdd69691f0e5"
        },
        {
          "alg": "SHA-256",
          "content": "655907c3469a8680dc2de3a275a8fdd69691f0e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        },
        {
          "alg": "SHA-256",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        },
        {
          "alg": "SHA-256",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table",
      "version": "3.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2bbc542f0fda9861a755d3947fefd8b3f513855f"
        },
        {
          "alg": "SHA-256",
          "content": "2bbc542f0fda9861a755d3947fefd8b3f513855f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/table@3.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table/-/table-3.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table@3.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table/-/table-3.8.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "edbf8903f66f7ce2f8eafd6ceed65e264c831b35"
        },
        {
          "alg": "SHA-256",
          "content": "edbf8903f66f7ce2f8eafd6ceed65e264c831b35"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slice-ansi@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-0.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
        },
        {
          "alg": "SHA-256",
          "content": "ab93f27a8dc13d28cac815c462143a6d9012ae9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        },
        {
          "alg": "SHA-256",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        },
        {
          "alg": "SHA-256",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        },
        {
          "alg": "SHA-256",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        },
        {
          "alg": "SHA-256",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c70bfd8169bc1dcbf48604e0f04b8b49cde9e9f"
        },
        {
          "alg": "SHA-256",
          "content": "9c70bfd8169bc1dcbf48604e0f04b8b49cde9e9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/user-home@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp",
      "version": "3.9.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "571ce45928dd40af6514fc4011866016c13845b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/gulp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "gulp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "gulp"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c8c13757cc1dd7bc379ac77b2c62a5c2868c40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecated",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c9af5464afa1e7a971458a8bdef2aa94d5bb19"
        }
      ],
      "purl": "pkg:npm/deprecated@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecated@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-util",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0054e1e744502e27c04c187c3ecc505dd54bbb4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-util@3.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-util@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eff52e3758249d33be402b8bb8e564bb2b5d4031"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-differ@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "beeper",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e6d5ea8c5dad001304a70b22638447f69cb2f809"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/beeper@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/beeper@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2743e3abb5c3fc2462e527dca445e04e9f4dee17"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dateformat@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fancy-log",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45be17d02bb9917d60ccffd4995c999e6c8c9948"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fancy-log@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fancy-log@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "time-stamp",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "764a5a11af50561921b133f3b44e618687e0f5c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/time-stamp@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/time-stamp@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulplog",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e28c4d45d05ecbbed818363ce8f9c5926229ffe5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulplog@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulplog@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glogg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7fe0f199f57ac906cf512feead8f90ee4a284fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glogg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glogg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sparkles",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1acbbfb592436d10bbe8f785b7cc6f82815012c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sparkles@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sparkles@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "has-gulplog",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6414c82913697da51590397dafb12f22967811ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-gulplog@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-gulplog@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reescape",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b1d6f5dfe07c8a355753e5f27fac7f1cde1616a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._reescape@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reescape@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reevaluate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58bc74c40664953ae0b124d806996daca431e2ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._reevaluate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
        },
        {
          "alg": "SHA-256",
          "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8cdecc6169a255be9098ae8b0c53d378931d14f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.template@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use https://socket.dev/npm/package/eta instead."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecopy",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecopy@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basetostring",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1861d877f824a52f669832dcaf3ee15566a07d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._basetostring@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basetostring@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basevalues",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b775762802bde3d3297503e26300820fdf661b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._basevalues@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basevalues@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isiterateecall",
      "version": "3.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5203ad7ba425fae842460e696db9cf3e6aac057c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.escape",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ee0dc18c1b48cc92effae71a10aab5b487698"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.escape@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.escape@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._root",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fba1c4524c19ee9a5f8136b4609f017cf4ded692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._root@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._root@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getnative@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f573d85c6a24289ff00663b491c1d338ff3458a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarguments@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.restparam",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "936a4e309ef330a7645ed4145986c85ae5b20805"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.restparam@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.restparam@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb307844753b66b9f1afa54e262c745307dba8e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multipipe",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a8f2ddf70eed564dff2d57f1e1a137d9f05078b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/multipipe@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multipipe@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c614dcf67e2fb14995a91711e5a617e8a60a31db"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cf4c54ef648e3813084c636dd2079e166c081d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        },
        {
          "alg": "SHA-256",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29bbd92078a739f0bcce2b4ee41e837953522924"
        }
      ],
      "purl": "pkg:npm/replace-ext@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "2.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0004569b37c7c74ba39c43f3ced78d1ad94140be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "through2"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0455b38fc5e0cf30d4325132e461970c2091cde"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vinyl@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "260b7a99ebb1edfe247538175f783243cb19d149"
        },
        {
          "alg": "SHA-256",
          "content": "260b7a99ebb1edfe247538175f783243cb19d149"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/clone@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "XSS vulnerability fixed in v1.0.3"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b88f94a82cf38b8791d58046ea4029ad88ca99d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/clone-stats@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liftoff",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a98f2ff67183d8ba7cfaca10548bd7ff0550b385"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/liftoff@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liftoff/-/liftoff-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liftoff@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liftoff/-/liftoff-2.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40043929e7bc60adf0b7f4827c4c6e75a0deca12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/findup-sync@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-file",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4935dedfd9488648e006b0129566e9386711ea63"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-file@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-file/-/detect-file-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-file@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-file/-/detect-file-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-exists-sync",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "982d6893af918e72d08dec9e8673ff2b5a8d6add"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-exists-sync@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-exists-sync@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-dir",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b219259a5602fac5c5c496ad894a6e8cc430261e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-dir@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-dir@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b81eba897e5a3d31d1c3d102f8f01441e559449"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-tilde@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea5a3bed42c6d6ce995a4f8a1269b5dae223828d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global-modules@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d3bc6b8da3ca8112a160d8d496ff0462bfef78f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global-prefix@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "homedir-polyfill",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c2bbc8a758998feebf5ed68580f76d46768b4bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/homedir-polyfill@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/homedir-polyfill@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-passwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-passwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-passwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de1aa6d63ea29dd248737b69f1ff8b8002d2108c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-windows@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a87c4378f03e827cecaf1acdf56c736c01c14e5"
        },
        {
          "alg": "SHA-256",
          "content": "9a87c4378f03e827cecaf1acdf56c736c01c14e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@1.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.2.14.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        },
        {
          "alg": "SHA-256",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fined",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b37dc844b76a2f5e7081e884f7c0ae344f153476"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fined@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fined@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97e801aa052df02454de46b02bf621642cdc8502"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-tilde@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.defaults",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a7f868334b407dea06da16d88d5cd29e435fecf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.defaults@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.defaults@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a794af0c05ab1752846ee753a1f211a05ba0c44f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-slice",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73034f00dcc1f40876008fd20feae77bd4b7c2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-slice@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-slice/-/array-slice-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-slice@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-slice/-/array-slice-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c63332f415cedc4b04dbfe70cf836494c53cb44b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-own@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.pick",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5392bee9782da6d9fb7d6afaf539779f1234c2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.pick@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.pick/-/object.pick-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-filepath",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "159d6155d43904d16c10ef698911da1e91969b73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-filepath@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-filepath@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20de69f3db942ef2d87b9c2da36f172235b1b5eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-absolute@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.2.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d27f4c7d516d175fb610db84bbeef23c3bc97aa5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-relative@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-0.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unc-path",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ab053a72573c10250ff416a3814c35178af39b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-unc-path@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unc-path@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unc-path-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unc-path-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unc-path-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-root@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-root-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff191eddcd7088a675b2610fffc976be9b8074b5"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c526a52d89b45c45cc690b88163be0497f550cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isstring",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isstring@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isstring@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.mapvalues",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bafa5005de9dd6f4f26668c30ca37230cc9689c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.mapvalues@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.mapvalues/-/lodash.mapvalues-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.mapvalues@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.mapvalues/-/lodash.mapvalues-4.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "orchestrator",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14e7e9e2764f7315fbac184e506c7aa6df94ad7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/orchestrator@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/orchestrator@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e177206c3c80837d85632e8b9359dfe8b2f6eaf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2e261557ce4c314ec8304f3fa82663e4297ca20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sequencify",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90cff19d02e07027fd767f5ead3e7b95d1e7380c"
        }
      ],
      "purl": "pkg:npm/sequencify@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sequencify@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-consume",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a41ead1a6d6081ceb79f65b061901b6d8f3d1d0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-consume@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-consume@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-hrtime",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7e3ea42435a4c9b2759d99e0f201eb195802ee1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pretty-hrtime@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-hrtime@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "300bc6e0e86374f7ba61068b5b1ecd57fc6532da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tildify",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tildify@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tildify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aab1a1fa30d45f88dd321148875ac02c0b55e5b4"
        }
      ],
      "purl": "pkg:npm/v8flags@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b5be23a32b63a7c9deb8d0f28d485724a3df190"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/v8flags/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:bin",
          "value": "user-home"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a6851ce1cac1c1cea5fe86c0931d620c2cfa9e6"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c656051e9817d9ff08ed881477f3fe4019f3ef7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defaults@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "3.1.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9170a5f12b790306fdfe598f313f8f7954fd143b"
        }
      ],
      "purl": "pkg:npm/glob-stream@3.1.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@3.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6cb73d3226c1efef04de3c56d012f03377ee15f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d087c39c6b38c001b97fca7ce6d0e1e80afbac7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob2base",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d419b3e28f12e83a362164a277055922c9c0d56"
        }
      ],
      "purl": "pkg:npm/glob2base@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob2base@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-index",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "675d358b2ca3892d795a1ab47232f8b6e2e0dde4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-index@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-index@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd565a9af8eb4473ba69b6ed8a34352cb552f126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ab9c67b29d57209071410e1d7a7a968cd3ad48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "through2"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        },
        {
          "alg": "SHA-256",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d59a4a75427447d9aa6c91e70263f8d26a4b104b"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b95b4a8df74b39c83298b0c05c978b4d9a3b710b"
        }
      ],
      "purl": "pkg:npm/glob-watcher@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40b709537d24d1d45767db5a908689dfe69ac44f"
        }
      ],
      "purl": "pkg:npm/gaze@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globule",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9c8edde1da79d125a151b79533b978676346ae5"
        }
      ],
      "purl": "pkg:npm/globule@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globule@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.1.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d29e0a055dea5138f4d07ed40e8982e83c2066cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@3.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15a4806a57547cb2d2dbf27f42e89a8c3451b364"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca4309dadee6b54cc0b8d247e8d7c7a0975bdc9b"
        }
      ],
      "purl": "pkg:npm/inherits@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c74e780574f63c6f9a090e90efbe6ef53a6a756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f57560c83b59fc270bd3d561b690043430e2551"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "3.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7613c778a1afea62f25c630a086d7f3acbbdd818"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@3.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@3.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natives",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9ff841418a6b2ec7a495e939984f78f163e6e31"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/natives@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natives/-/natives-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natives@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natives/-/natives-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85b8862f3844b5a6d5ec8467a93598173a36f794"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/vinyl-fs/node_modules/.bin/strip-bom"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-bom"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59bfb50cd905f60d7c394cd3d9acaab4e6ad934e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f356c87a550a255461f36bbeb2a5ba8bf784847"
        }
      ],
      "purl": "pkg:npm/vinyl@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6126a90ad4f72dbf5acdb243cc37724fe93fc1f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/clone@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-babel",
      "version": "6.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c0176e4ba3f244c60588a0c4b320a45d1adefce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-babel@6.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-babel/-/gulp-babel-6.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-babel@6.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-babel/-/gulp-babel-6.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-babel"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab6549d61d172c2b1b87be5c508d239c8ef87705"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-insert",
      "version": "0.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "781213f110de39e9b36ca8c3bb502e045a58cdfd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-insert@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-insert/-/gulp-insert-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-insert@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-insert/-/gulp-insert-0.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-insert"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamqueue",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66f5f5ec94e9b8af249e4aec2dd1f741bfe94de3"
        }
      ],
      "purl": "pkg:npm/streamqueue@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/streamqueue/-/streamqueue-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamqueue@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/streamqueue/-/streamqueue-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-plumber",
      "version": "1.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f12176c2d0422f60306c242fff6a01a394faba09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-plumber@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-plumber/-/gulp-plumber-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-plumber@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-plumber/-/gulp-plumber-1.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-plumber"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-rename",
      "version": "1.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ad4428763f05e2764dec1c67d868db275687817"
        }
      ],
      "purl": "pkg:npm/gulp-rename@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-rename@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-rename"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-sourcemaps",
      "version": "2.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ccce899a8a3bfca1593a3348d0fbf41dd3f51e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-sourcemaps@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-sourcemaps/-/gulp-sourcemaps-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-sourcemaps@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-sourcemaps/-/gulp-sourcemaps-2.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-sourcemaps"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "@gulp-sourcemaps",
      "name": "identity-map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfa23bc5840f9104ce32a65e74db7e7a974bbee1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40gulp-sourcemaps/identity-map@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@gulp-sourcemaps/identity-map/-/identity-map-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@gulp-sourcemaps/identity-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@gulp-sourcemaps/identity-map/-/identity-map-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73a4c81de85db664d4ee674f7d47085e3b2d55dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/css@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css/-/css-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css/-/css-2.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bc146ca517c1471f5dacbe2571b2b7f9e3346"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
        },
        {
          "alg": "SHA-256",
          "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "610f6122a445b8dd51535a2a71b783dfc1248761"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.3.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "See https://github.com/lydell/source-map-resolve#deprecated"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95f13629b12c3a51a5d215abdce2aa9f32f80773"
        }
      ],
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/atob@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/atob"
        },
        {
          "name": "cdx:npm:bin",
          "value": "atob"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c637fe77c893afd2a663fe21aa9080068e2052a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "https://github.com/lydell/resolve-url#deprecated"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-url",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ecaf13b57bcd09da8a40c5d269db33799d4aaf9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-url@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "See https://github.com/lydell/source-map-url#deprecated"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please see https://github.com/lydell/urix#deprecated"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@gulp-sourcemaps",
      "name": "map-sources",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "890ae7c5d8c877f6d384860215ace9d7ec945bda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40gulp-sourcemaps/map-sources@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@gulp-sourcemaps/map-sources/-/map-sources-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@gulp-sourcemaps/map-sources@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@gulp-sourcemaps/map-sources/-/map-sources-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug-fabulous",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b970878c9fa4fbd1c88306eab323c830c58f1d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug-fabulous@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug-fabulous/-/debug-fabulous-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug-fabulous@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug-fabulous/-/debug-fabulous-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3912dc55d7167fc3af17d2b85c13f93deaedaa43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae25cf2512b3885a1d95d7f037868d8431124765"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memoizee",
      "version": "0.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc3ea1e4be056dd475d521979d7be3d5e5b21c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memoizee@0.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memoizee@0.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
        },
        {
          "alg": "SHA-256",
          "content": "79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-promise@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2738bd9f0d3cf4f84490c5736c48699ac632cda3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next-tick",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca86d1fe8828169b0120208e3dc8424b9db8342c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/next-tick@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next-tick@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "timers-ext",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61cc47a76c1abd3195f14527f978d58ae94c5204"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/timers-ext@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-ext@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a3b3d0e98063d43f4c03f2e8ae6cd51a86883a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "object-assign"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 3
          },
          {
            "location": "src/TimeView.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-newline",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f41f1c10be4b00e87b5f13da680759f2c5bfd3e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-newline@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-newline/-/detect-newline-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-newline@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-newline/-/detect-newline-2.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom-string",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5211e9224369fbb81d633a2f00044dc8cedad92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom-string@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom-string/-/strip-bom-string-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom-string@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom-string/-/strip-bom-string-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c88036cf565e5df05558bfc911f8656df218884"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vinyl@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-uglify",
      "version": "1.5.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "524788d87666d09f9d0c21fb2177f90039a658c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gulp-uglify@1.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-uglify/-/gulp-uglify-1.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-uglify@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-uglify/-/gulp-uglify-1.5.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-uglify"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b148bf82430a27699b7483a03eb6b67585bfc888"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deap/-/deap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deap/-/deap-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "65ea2fb3059c9394692f15fed87c2b36c16b9adf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.6.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-save-license",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95726c17cc6fd171c3617e3bf4d8d82aa8c4cce1"
        }
      ],
      "purl": "pkg:npm/uglify-save-license@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-save-license/-/uglify-save-license-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-save-license@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-save-license/-/uglify-save-license-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcebf1e203dee5c2ad2091c805300a343d9e6c7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest/-/jest-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest/-/jest-18.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jest"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jest"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-cli",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ead36ecad420817c2c9baa2aa7574f63257b3d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-cli@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-cli/-/jest-cli-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-cli@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-cli/-/jest-cli-18.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jest"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jest"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "callsites",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06eb84f00eea413da86affefacbffb36093b3c50"
        },
        {
          "alg": "SHA-256",
          "content": "06eb84f00eea413da86affefacbffb36093b3c50"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/callsites@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-ci",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f739336b2632365061a9d48270cd56ae3369318e"
        },
        {
          "alg": "SHA-256",
          "content": "f739336b2632365061a9d48270cd56ae3369318e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-ci@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-ci/-/is-ci-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-ci@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-ci/-/is-ci-1.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ci-info",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc5285f2b4e251821683681c381c3388f46ec534"
        },
        {
          "alg": "SHA-256",
          "content": "dc5285f2b4e251821683681c381c3388f46ec534"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ci-info@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ci-info/-/ci-info-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-api",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fcc0b461e2b3bda71e305155138238768257d9de"
        },
        {
          "alg": "SHA-256",
          "content": "fcc0b461e2b3bda71e305155138238768257d9de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-api@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-api/-/istanbul-api-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-api@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-api/-/istanbul-api-1.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fileset",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e7548a96d3cc2327ee5e674168723a333bba2a0"
        },
        {
          "alg": "SHA-256",
          "content": "8e7548a96d3cc2327ee5e674168723a333bba2a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fileset@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fileset/-/fileset-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fileset@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fileset/-/fileset-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-hook",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd6607f03076578fe7d6f2a630cf143b49bacddc"
        },
        {
          "alg": "SHA-256",
          "content": "dd6607f03076578fe7d6f2a630cf143b49bacddc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-hook@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "append-transform",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d76ebf8ca94d276e247a36bad44a4b74ab611991"
        },
        {
          "alg": "SHA-256",
          "content": "d76ebf8ca94d276e247a36bad44a4b74ab611991"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/append-transform@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-require-extensions",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f37ea15d3e13ffd9b437d33e1a75b5fb97874cb8"
        },
        {
          "alg": "SHA-256",
          "content": "f37ea15d3e13ffd9b437d33e1a75b5fb97874cb8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/default-require-extensions@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0e55f56655ffa34222080b7a0cd4760e1405fc9"
        },
        {
          "alg": "SHA-256",
          "content": "f0e55f56655ffa34222080b7a0cd4760e1405fc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6fe1acba8ce08eebc638e572e294d267008aa0c"
        },
        {
          "alg": "SHA-256",
          "content": "a6fe1acba8ce08eebc638e572e294d267008aa0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "042be5c89e175bc3f86523caab29c014e77fee4e"
        },
        {
          "alg": "SHA-256",
          "content": "042be5c89e175bc3f86523caab29c014e77fee4e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-reports@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d30c718b09a3d96f23ea4cc1f403c4d3ba9ff4f"
        },
        {
          "alg": "SHA-256",
          "content": "3d30c718b09a3d96f23ea4cc1f403c4d3ba9ff4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/handlebars"
        },
        {
          "name": "cdx:npm:bin",
          "value": "handlebars"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        },
        {
          "alg": "SHA-256",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        },
        {
          "alg": "SHA-256",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        },
        {
          "alg": "SHA-256",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-changed-files",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5657758736996f590a51b87e5c9369d904ba7b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-changed-files@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-17.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-changed-files@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-17.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-config",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6111740a6d48aab86ff5a9e6ab0b98bd993b6ff4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-config@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-config/-/jest-config-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-config@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-config/-/jest-config-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-jsdom",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18b42f0c4ea2bae9f36cab3639b1e8f8c384e24e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-environment-jsdom@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-jsdom@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-mock",
      "version": "18.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c248846ea33fa558b526f5312ab4a6765e489b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-mock@18.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-mock/-/jest-mock-18.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-mock@18.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-mock/-/jest-mock-18.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-util",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a99c32114ab17f84be094382527006e6d4bfc6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-util@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-util/-/jest-util-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-util@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-util/-/jest-util-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "056695150d7aa93237ca7e378ac3b1682b7963b9"
        },
        {
          "alg": "SHA-256",
          "content": "056695150d7aa93237ca7e378ac3b1682b7963b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-file-exists",
      "version": "17.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f63eb73a1c43a13f461be261768b45af2cdd169"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-file-exists@17.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-file-exists/-/jest-file-exists-17.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-file-exists@17.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-file-exists/-/jest-file-exists-17.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "9.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8c546fffcb06c00d4833ca84410fed7f8a097d4"
        },
        {
          "alg": "SHA-256",
          "content": "e8c546fffcb06c00d4833ca84410fed7f8a097d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsdom@9.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdom/-/jsdom-9.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@9.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdom/-/jsdom-9.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abab",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b81de5f7274ec4e756d797cd834f303642724e5d"
        },
        {
          "alg": "SHA-256",
          "content": "b81de5f7274ec4e756d797cd834f303642724e5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abab@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abab/-/abab-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abab@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abab/-/abab-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use your platform's native atob() and btoa() methods instead"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-globals",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd8270f71fbb4996b004fa880ee5d46573a731bf"
        },
        {
          "alg": "SHA-256",
          "content": "fd8270f71fbb4996b004fa880ee5d46573a731bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-globals@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-globals@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c2a5ef2472fd9ea742b04c77a75093ba2757c93"
        },
        {
          "alg": "SHA-256",
          "content": "8c2a5ef2472fd9ea742b04c77a75093ba2757c93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-equal/-/array-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-equal/-/array-equal-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type-parser",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3e56988c53c65127fb46d4032a3a900246fdc94"
        },
        {
          "alg": "SHA-256",
          "content": "c3e56988c53c65127fb46d4032a3a900246fdc94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "https://opensource.org/licenses/WTFPL",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-type-parser@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type-parser/-/content-type-parser-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type-parser@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type-parser/-/content-type-parser-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use whatwg-mimetype instead"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cssom",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b8036170c79f07a90ff2f16e22284027a243848b"
        },
        {
          "alg": "SHA-256",
          "content": "b8036170c79f07a90ff2f16e22284027a243848b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cssom@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssom/-/cssom-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssom@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssom/-/cssom-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssstyle",
      "version": "0.2.37",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "541097234cb2513c83ceed3acddc27ff27987d54"
        },
        {
          "alg": "SHA-256",
          "content": "541097234cb2513c83ceed3acddc27ff27987d54"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cssstyle@0.2.37",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssstyle/-/cssstyle-0.2.37.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssstyle@0.2.37",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssstyle/-/cssstyle-0.2.37.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a5b53af4693110bebb0867aa3430dd3b70a1018"
        },
        {
          "alg": "SHA-256",
          "content": "5a5b53af4693110bebb0867aa3430dd3b70a1018"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escodegen@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.8.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/escodegen, /app/node_modules/.bin/esgenerate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "escodegen, esgenerate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96e3b70d5779f6ad49cd032673d1c312767ba581"
        },
        {
          "alg": "SHA-256",
          "content": "96e3b70d5779f6ad49cd032673d1c312767ba581"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/escodegen/node_modules/.bin/esparse, /app/node_modules/escodegen/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af67f2dc922582415950926091a4005d29c9bb44"
        },
        {
          "alg": "SHA-256",
          "content": "af67f2dc922582415950926091a4005d29c9bb44"
        }
      ],
      "purl": "pkg:npm/estraverse@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d"
        },
        {
          "alg": "SHA-256",
          "content": "dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d"
        }
      ],
      "purl": "pkg:npm/source-map@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-encoding-sniffer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79bf7a785ea495fe66165e734153f363ff5437da"
        },
        {
          "alg": "SHA-256",
          "content": "79bf7a785ea495fe66165e734153f363ff5437da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "https://opensource.org/licenses/WTFPL",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/html-encoding-sniffer@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-encoding-sniffer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-encoding",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c6c451a198ee7aec55b1ec61d0920c67801a5f4"
        },
        {
          "alg": "SHA-256",
          "content": "3c6c451a198ee7aec55b1ec61d0920c67801a5f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "https://opensource.org/licenses/WTFPL",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-encoding@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-encoding@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use @exodus/bytes instead for a more spec-conformant and faster implementation"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f88aba4ab0b1508e8312acc39345f36e992e2f2"
        },
        {
          "alg": "SHA-256",
          "content": "1f88aba4ab0b1508e8312acc39345f36e992e2f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nwmatcher",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ae9b07b0ea804db7e25f05cb5fe4097d4e4949f"
        },
        {
          "alg": "SHA-256",
          "content": "7ae9b07b0ea804db7e25f05cb5fe4097d4e4949f"
        }
      ],
      "purl": "pkg:npm/nwmatcher@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nwmatcher/-/nwmatcher-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nwmatcher@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nwmatcher/-/nwmatcher-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse5",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b7f3b0de32be78dc2401b17573ccaf0f6f59d94"
        },
        {
          "alg": "SHA-256",
          "content": "9b7f3b0de32be78dc2401b17573ccaf0f6f59d94"
        }
      ],
      "purl": "pkg:npm/parse5@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5/-/parse5-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5/-/parse5-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
        },
        {
          "alg": "SHA-256",
          "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/sshpk-conv, /app/node_modules/.bin/sshpk-sign, /app/node_modules/.bin/sshpk-verify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sshpk-conv, sshpk-sign, sshpk-verify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3dd3d3e790abc24d7b0d3a034ffababe28ebbc04"
        },
        {
          "alg": "SHA-256",
          "content": "3dd3d3e790abc24d7b0d3a034ffababe28ebbc04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028)."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        },
        {
          "alg": "SHA-256",
          "content": "2816234e2378bddc4e5354fab5caa895df7100d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "symbol-tree",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae27db38f660a7ae2e1c3b7d1bc290819b8519e6"
        },
        {
          "alg": "SHA-256",
          "content": "ae27db38f660a7ae2e1c3b7d1bc290819b8519e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/symbol-tree@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-tree@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8015a17ab83e7e1b311638486ace81da6ce206a0"
        },
        {
          "alg": "SHA-256",
          "content": "8015a17ab83e7e1b311638486ace81da6ce206a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "4.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2981aa9148c1e00a41c5a6131166ab4683bbcc0"
        },
        {
          "alg": "SHA-256",
          "content": "d2981aa9148c1e00a41c5a6131166ab4683bbcc0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-url@4.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-4.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@4.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-4.8.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
        },
        {
          "alg": "SHA-256",
          "content": "8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24534275e2a7bc6be7bc86611cc16ae0a5654871"
        },
        {
          "alg": "SHA-256",
          "content": "24534275e2a7bc6be7bc86611cc16ae0a5654871"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-name-validator",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d8b8f1eccd3419aa362061becef515e1e559635"
        },
        {
          "alg": "SHA-256",
          "content": "4d8b8f1eccd3419aa362061becef515e1e559635"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "https://opensource.org/licenses/WTFPL",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xml-name-validator@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-name-validator@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-node",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d6797572c8dda99acf5fae696eb62945547c779"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-environment-node@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-node@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-jasmine2",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "094e104c2c189708766c77263bb2aecb5860a80b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-jasmine2@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-jasmine2@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-matcher-utils",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ac4651955ee2a60cef1e7fcc98cdfd773c0f932"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-matcher-utils@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-matcher-utils@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "pretty-format",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb65a86f7a7f9194963eee91865c1bcf1039e284"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pretty-format@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-format/-/pretty-format-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-format/-/pretty-format-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-matchers",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0341484bf87a1fd0bac0a4d2c899e2b77a3f1ead"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-matchers@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-matchers/-/jest-matchers-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-matchers@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-matchers/-/jest-matchers-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-diff",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ff79e74dd988c139195b365dc65d87f606f4803"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-diff@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-diff/-/jest-diff-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-diff@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-diff/-/jest-diff-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-snapshot",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "55b96d2ee639c9bce76f87f2a3fd40b71c7a5916"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-snapshot@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-snapshot@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-resolve",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6800accb536658c906cd5e29de412b1ab9ac249b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-resolve@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "browser-resolve",
      "version": "1.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ff09b0a2c421718a1051c260b32e48f442938ce"
        },
        {
          "alg": "SHA-256",
          "content": "8ff09b0a2c421718a1051c260b32e48f442938ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-resolve@1.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b"
        },
        {
          "alg": "SHA-256",
          "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-haste-map",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06839c74b770a40c1a106968851df8d281c08375"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-haste-map@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-haste-map@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fb-watchman",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a24cf47827f82d38fb59a69ad70b76e3b6ae7383"
        },
        {
          "alg": "SHA-256",
          "content": "a24cf47827f82d38fb59a69ad70b76e3b6ae7383"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fb-watchman@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fb-watchman@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-1.9.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bser",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "381116970b2a6deea5646dd15dd7278444b56169"
        },
        {
          "alg": "SHA-256",
          "content": "381116970b2a6deea5646dd15dd7278444b56169"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bser@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bser/-/bser-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bser@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bser/-/bser-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-int64",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a9065cdb355d3182d8f94ce11188b825c68a3b"
        },
        {
          "alg": "SHA-256",
          "content": "87a9065cdb355d3182d8f94ce11188b825c68a3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-int64@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-int64@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sane",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "88f763d74040f5f0c256b6163db399bf110ac715"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sane@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sane/-/sane-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sane@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sane/-/sane-1.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/sane"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sane"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "some dependency vulnerabilities fixed, support for node < 10 dropped, and newer ECMAScript syntax/features added"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exec-sh",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14f75de3f20d286ef933099b2ce50a90359cef10"
        },
        {
          "alg": "SHA-256",
          "content": "14f75de3f20d286ef933099b2ce50a90359cef10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/exec-sh@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exec-sh/-/exec-sh-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exec-sh@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exec-sh/-/exec-sh-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7531e39d4949c281a66b8c5a6e0265e8b05894da"
        },
        {
          "alg": "SHA-256",
          "content": "7531e39d4949c281a66b8c5a6e0265e8b05894da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge/-/merge-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge/-/merge-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walker",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f7f9b8fd10d677262b18a884e28d19618e028fb"
        },
        {
          "alg": "SHA-256",
          "content": "2f7f9b8fd10d677262b18a884e28d19618e028fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/walker@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walker/-/walker-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walker@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walker/-/walker-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "makeerror",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e01a5c9109f2af79660e4e8b9587790184f5a96c"
        },
        {
          "alg": "SHA-256",
          "content": "e01a5c9109f2af79660e4e8b9587790184f5a96c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/makeerror@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/makeerror@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmpl",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23640dd7b42d00433911140820e5cf440e521dd1"
        },
        {
          "alg": "SHA-256",
          "content": "23640dd7b42d00433911140820e5cf440e521dd1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tmpl@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmpl@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watch",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77798b2da0f9910d595f1ace5b0c2258521f21dc"
        },
        {
          "alg": "SHA-256",
          "content": "77798b2da0f9910d595f1ace5b0c2258521f21dc"
        }
      ],
      "purl": "pkg:npm/watch@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watch/-/watch-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watch@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watch/-/watch-0.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "worker-farm",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b60140b603982cfbad900cb38294ba54914be4763ed2e8b54efb9af9f213833f01c9a2533051ad6b347ac7141fc1f88071bc04fb67cb1bf2b8f707364dfc0237"
        },
        {
          "alg": "SHA-256",
          "content": "a438bc993a7a7d133bcb6547c95eca7cff4897d8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/worker-farm@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/worker-farm/-/worker-farm-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/worker-farm@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/worker-farm/-/worker-farm-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-resolve-dependencies",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8134fb5caf59c9ed842fe0152ab01c52711f1bbb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-resolve-dependencies@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve-dependencies@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-18.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-runtime",
      "version": "18.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3abfd687175b21fc3b85a2b8064399e997859922"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jest-runtime@18.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-18.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-runtime@18.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-18.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jest-runtime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jest-runtime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "node-notifier",
      "version": "4.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "056d14244f3dcc1ceadfe68af9cff0c5473a33f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-notifier@4.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-notifier/-/node-notifier-4.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-notifier@4.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-notifier/-/node-notifier-4.6.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/notify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "notify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-usage",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c01e0dc706c234b39c933838c8e20b2175776e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-usage@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-usage/-/cli-usage-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-usage@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-usage/-/cli-usage-0.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c6c618fccece4ef86c4fc6cb8a7cbf5aeda8d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/marked@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-0.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/marked"
        },
        {
          "name": "cdx:npm:bin",
          "value": "marked"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked-terminal",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8c460881c772c7604b64367007ee5f77f125904"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/marked-terminal@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked-terminal/-/marked-terminal-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked-terminal@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked-terminal/-/marked-terminal-1.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cardinal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50e21c1b0aa37729f9377def196b5a9cec932ee9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cardinal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cardinal/-/cardinal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cardinal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cardinal/-/cardinal-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/cdl"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cdl"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansicolors",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be089599097b74a5c9c4a84a0cdbcdb62bd87aef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansicolors@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansicolors@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redeyed",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e96c193b40c0816b00aec842698e61185e55498a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redeyed@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redeyed/-/redeyed-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redeyed@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redeyed/-/redeyed-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53cf247acda77313e551c3aa2e73342d3fb4f7d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/redeyed/node_modules/.bin/esparse, /app/node_modules/redeyed/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-table",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f53b05266a8b1a0b934b3d0821e6e2dc5914ae23"
        }
      ],
      "purl": "pkg:npm/cli-table@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-table/-/cli-table-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-table@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-table/-/cli-table-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0433f44d809680fdeb60ed260f1b0c262e82a40b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/colors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.assign",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d99f3ccd7a6d261d19bdaeb9245005d285808e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.assign@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.assign@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-4.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-emoji",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6eec6bfb07421e2148c75c6bba72421f8530a826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-emoji@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-emoji/-/node-emoji-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-emoji@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-emoji/-/node-emoji-1.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.toarray",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24c4bfcd6b2fba38bfd0594db1179d8e9b656561"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.toarray@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.toarray/-/lodash.toarray-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.toarray@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.toarray/-/lodash.toarray-4.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growly",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f10748cbe76af964b7c96c93c6bcc28af120c081"
        },
        {
          "alg": "SHA-256",
          "content": "f10748cbe76af964b7c96c93c6bcc28af120c081"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/growly@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growly@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.clonedeep",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a0a1e40d82a5ea89ff5b147b8444ed63d92827db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.clonedeep@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.clonedeep@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-3.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._baseclone",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "303519bf6393fe7e42f34d8b630ef7794e3542b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseclone@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._baseclone/-/lodash._baseclone-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._baseclone@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._baseclone/-/lodash._baseclone-3.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._arraycopy",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "76e7b7c1f1fb92547374878a562ed06a3e50f6e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._arraycopy@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._arraycopy/-/lodash._arraycopy-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._arraycopy@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._arraycopy/-/lodash._arraycopy-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._arrayeach",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bab156b2a90d3f1bbd5c653403349e5e5933ef9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._arrayeach@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._arrayeach/-/lodash._arrayeach-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._arrayeach@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._arrayeach/-/lodash._arrayeach-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._baseassign",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseassign@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._baseassign@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basefor",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7550b4e9218ef09fad24343b612021c79b4c20c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._basefor@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basefor/-/lodash._basefor-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basefor@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basefor/-/lodash._basefor-3.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._bindcallback",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e531c27644cf8b57a99e17ed95b35c748789392e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._bindcallback@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._bindcallback/-/lodash._bindcallback-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._bindcallback@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._bindcallback/-/lodash._bindcallback-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shellwords",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66afd47b6a12932d9071cbfd98a52e785cd0ba14"
        },
        {
          "alg": "SHA-256",
          "content": "66afd47b6a12932d9071cbfd98a52e785cd0ba14"
        }
      ],
      "purl": "pkg:npm/shellwords@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shellwords/-/shellwords-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shellwords@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shellwords/-/shellwords-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throat",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50cb0670edbc40237b9e347d7e1f88e4620af836"
        },
        {
          "alg": "SHA-256",
          "content": "50cb0670edbc40237b9e347d7e1f88e4620af836"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/throat@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throat/-/throat-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throat@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throat/-/throat-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "7.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40b402770c2bda23469096bee91ab675e3b1fc6e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsdom@7.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdom/-/jsdom-7.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@7.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdom/-/jsdom-7.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab6e7d9d886aaca8b085bc3312b79a198433f0e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-2.7.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jsdom/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-globals",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "55bb5e98691507b74579d0513413217c380c54cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-globals@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-globals@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-1.0.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bf8258f7d318c7443c36f2e169402a1a6703506"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url-compat",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00898111af689bb097541cd5a45ca6c8798445bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-url-compat@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url-compat/-/whatwg-url-compat-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url-compat@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url-compat/-/whatwg-url-compat-0.6.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "3.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0ef4d332126dbf18d0d640c9b382dd48be97594"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mocha@3.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-3.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-3.4.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c99094176e12240cb22d6c5146098400fe0f7d4"
        },
        {
          "alg": "SHA-256",
          "content": "9c99094176e12240cb22d6c5146098400fe0f7d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-readlink",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725"
        },
        {
          "alg": "SHA-256",
          "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-readlink@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-readlink@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bc596bcabe7617f11d9fa15361eded5608b8499b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/growl@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        },
        {
          "alg": "SHA-256",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please use the native JSON object instead of JSON 3"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.create",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.create@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.create@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecreate",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc661614daa7fc311b7d03bf16806a0213cf821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._basecreate@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecreate@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment",
      "version": "2.18.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c36193dd3ce1c2eed2adb7c802dbbc77a81b1c0f"
        },
        {
          "alg": "SHA-256",
          "content": "c36193dd3ce1c2eed2adb7c802dbbc77a81b1c0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/moment@2.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment/-/moment-2.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment/-/moment-2.18.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "moment"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 6
          },
          {
            "location": "dist/react-datetime.js",
            "line": 8
          },
          {
            "location": "dist/react-datetime.js",
            "line": 12
          },
          {
            "location": "dist/react-datetime.min.js",
            "line": 6
          },
          {
            "location": "example/formatChangeExample.js",
            "line": 5
          },
          {
            "location": "example/viewModeChangeExample.js",
            "line": 5
          },
          {
            "location": "src/DaysView.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment-timezone",
      "version": "0.5.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fde9b021e28b6c823de52b2766dcaee476d03788a7f69ba318da24980b30a6e5ad73987a3583e68adf4ebc74311ea1c2d94084bd914f1bb1d4072ea12f816d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/moment-timezone@0.5.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment-timezone/-/moment-timezone-0.5.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment-timezone@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment-timezone/-/moment-timezone-0.5.21.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pre-commit",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbcee0ee9de7235e57f79c56d7ce94641a69eec6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pre-commit@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pre-commit@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "622e32e82488b49279114a4f9ecf45e7cd6bba55"
        },
        {
          "alg": "SHA-256",
          "content": "622e32e82488b49279114a4f9ecf45e7cd6bba55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        },
        {
          "alg": "SHA-256",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
        },
        {
          "alg": "SHA-256",
          "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spawn-sync",
      "version": "1.0.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00799557eb7fb0c8376c29d44e8a1ea67e57476"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spawn-sync@1.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spawn-sync/-/spawn-sync-1.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-sync@1.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spawn-sync/-/spawn-sync-1.0.15.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-shim",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b62c3791cf7909ea35ed46e17658bb417cb3917"
        }
      ],
      "purl": "pkg:npm/os-shim@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-shim/-/os-shim-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-shim@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-shim/-/os-shim-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-addons-test-utils",
      "version": "15.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "062d36117fe8d18f3ba5e06eb33383b0b85ea5b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-addons-test-utils@15.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-addons-test-utils/-/react-addons-test-utils-15.6.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-addons-test-utils@15.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-addons-test-utils/-/react-addons-test-utils-15.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "typescript",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8395f85d459276067c988aa41837a8f82870844"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-2.4.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-server",
      "version": "1.16.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cbd5f2d2ac8d4e593aacd5c9702e7bbd5e59892"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack-dev-server@1.16.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-1.16.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@1.16.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-1.16.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/webpack-dev-server"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack-dev-server"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "030c9f198f1643a057d776a738e922da4373012d"
        },
        {
          "alg": "SHA-256",
          "content": "030c9f198f1643a057d776a738e922da4373012d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compression@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3ca7434938648c3e0d9c1e328dd68b622c284ca"
        },
        {
          "alg": "SHA-256",
          "content": "c3ca7434938648c3e0d9c1e328dd68b622c284ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/accepts@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b327184e8992101177b28563fb5e7102acd0ca9"
        },
        {
          "alg": "SHA-256",
          "content": "2b327184e8992101177b28563fb5e7102acd0ca9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c9423ea2d252c270c41b2bdefeff9bb6b62c06a"
        },
        {
          "alg": "SHA-256",
          "content": "4c9423ea2d252c270c41b2bdefeff9bb6b62c06a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bytes@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "feda1c7f7617912732b29bf8cf26252a20b9eecd"
        },
        {
          "alg": "SHA-256",
          "content": "feda1c7f7617912732b29bf8cf26252a20b9eecd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compressible@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "928f5d0f470d49342651ea6794b0857c100693f7"
        },
        {
          "alg": "SHA-256",
          "content": "928f5d0f470d49342651ea6794b0857c100693f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67535ebb694c1d52257457984665323f587e8d37"
        },
        {
          "alg": "SHA-256",
          "content": "67535ebb694c1d52257457984665323f587e8d37"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vary@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e51d17f8f0ef0db90a64fdb47de3051556e9f169"
        },
        {
          "alg": "SHA-256",
          "content": "e51d17f8f0ef0db90a64fdb47de3051556e9f169"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.3.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-history-api-fallback@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "express",
      "version": "4.15.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bab65d0f03aa80c358408972fc700f916944b662"
        },
        {
          "alg": "SHA-256",
          "content": "bab65d0f03aa80c358408972fc700f916944b662"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/express@4.15.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.15.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.15.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.15.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        },
        {
          "alg": "SHA-256",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
        },
        {
          "alg": "SHA-256",
          "content": "0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7d113aee7a8dd27bd21133c4dc2529df1721eed"
        },
        {
          "alg": "SHA-256",
          "content": "b7d113aee7a8dd27bd21133c4dc2529df1721eed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-type@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
        },
        {
          "alg": "SHA-256",
          "content": "e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        },
        {
          "alg": "SHA-256",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "92bad1f6d05bbb6bba22cca88bcd0ec894c2861e"
        },
        {
          "alg": "SHA-256",
          "content": "92bad1f6d05bbb6bba22cca88bcd0ec894c2861e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e1bd82c6aab6ced965b97b88b17ed3e528ca18c3"
        },
        {
          "alg": "SHA-256",
          "content": "e1bd82c6aab6ced965b97b88b17ed3e528ca18c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/depd@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e3d58655346909fe6f0f45a5de68103b294d20"
        },
        {
          "alg": "SHA-256",
          "content": "79e3d58655346909fe6f0f45a5de68103b294d20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        },
        {
          "alg": "SHA-256",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6f631aef336d6c46362b51764044ce216be3c051"
        },
        {
          "alg": "SHA-256",
          "content": "6f631aef336d6c46362b51764044ce216be3c051"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/etag@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef47e77950e999780e86022a560e3217e0d0cc89"
        },
        {
          "alg": "SHA-256",
          "content": "ef47e77950e999780e86022a560e3217e0d0cc89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        },
        {
          "alg": "SHA-256",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        },
        {
          "alg": "SHA-256",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8ab8c9223ba34888aa64a297b28853bec18da56"
        },
        {
          "alg": "SHA-256",
          "content": "c8ab8c9223ba34888aa64a297b28853bec18da56"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
        },
        {
          "alg": "SHA-256",
          "content": "faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/statuses@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        },
        {
          "alg": "SHA-256",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f474ca5e6a9246d6fd8e0953cfa9b9c805afa78e"
        },
        {
          "alg": "SHA-256",
          "content": "f474ca5e6a9246d6fd8e0953cfa9b9c805afa78e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fresh@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        },
        {
          "alg": "SHA-256",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        },
        {
          "alg": "SHA-256",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        },
        {
          "alg": "SHA-256",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27e545f6960a44a627d9b44467e35c1b6b4ce2f3"
        },
        {
          "alg": "SHA-256",
          "content": "27e545f6960a44a627d9b44467e35c1b6b4ce2f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/proxy-addr@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19ef9874c4ae1c297bcf078fde63a09b66a84363"
        },
        {
          "alg": "SHA-256",
          "content": "19ef9874c4ae1c297bcf078fde63a09b66a84363"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e03a52fdad83a8bbb2b25cbf4998b4cffcd3dec"
        },
        {
          "alg": "SHA-256",
          "content": "1e03a52fdad83a8bbb2b25cbf4998b4cffcd3dec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f49be6b487894ddc40dcc94a322f611092e00d5e"
        },
        {
          "alg": "SHA-256",
          "content": "f49be6b487894ddc40dcc94a322f611092e00d5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.15.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5013f9f99023df50d1bd9892c19e3defd1d53309"
        },
        {
          "alg": "SHA-256",
          "content": "5013f9f99023df50d1bd9892c19e3defd1d53309"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/send@0.15.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.15.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.15.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.15.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "978857442c44749e4206613e37946205826abd80"
        },
        {
          "alg": "SHA-256",
          "content": "978857442c44749e4206613e37946205826abd80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5f8b8ed98aca545656bf572997387f904a722257"
        },
        {
          "alg": "SHA-256",
          "content": "5f8b8ed98aca545656bf572997387f904a722257"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66567e37043eeb4f04d91bd658c0cbefb55b8e04"
        },
        {
          "alg": "SHA-256",
          "content": "66567e37043eeb4f04d91bd658c0cbefb55b8e04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "115f9e3b6b3daf2959983cb38f149a2d40eb5d53"
        },
        {
          "alg": "SHA-256",
          "content": "115f9e3b6b3daf2959983cb38f149a2d40eb5d53"
        }
      ],
      "purl": "pkg:npm/mime@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.12.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f4ba19e2f3030c547f8af99107838ec38d5b1e2"
        },
        {
          "alg": "SHA-256",
          "content": "9f4ba19e2f3030c547f8af99107838ec38d5b1e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serve-static@1.12.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.12.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cab10fb4909e441c82842eafe1ad646c81804410"
        },
        {
          "alg": "SHA-256",
          "content": "cab10fb4909e441c82842eafe1ad646c81804410"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-is@1.6.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        },
        {
          "alg": "SHA-256",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0294fb922bb9375153541c4f7096231f287c8af8"
        },
        {
          "alg": "SHA-256",
          "content": "0294fb922bb9375153541c4f7096231f287c8af8"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-middleware",
      "version": "0.17.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "642e8848851d66f09d4f124912846dbaeb41b833"
        },
        {
          "alg": "SHA-256",
          "content": "642e8848851d66f09d4f124912846dbaeb41b833"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-middleware@0.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-middleware@0.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.17.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.16.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06dff292952bf64dbe8471fa9df73066d4f37742"
        },
        {
          "alg": "SHA-256",
          "content": "06dff292952bf64dbe8471fa9df73066d4f37742"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy@1.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.16.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.16.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c86991d816ad1e504750e73874224ecf3bec508"
        },
        {
          "alg": "SHA-256",
          "content": "1c86991d816ad1e504750e73874224ecf3bec508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eventemitter3@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        },
        {
          "alg": "SHA-256",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        },
        {
          "alg": "SHA-256",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        },
        {
          "alg": "SHA-256",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42c3e18ec95466b6bf0dc42f3a2945c3f0cad8fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/open@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-0.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2b280fc560d616ee81b48bf0fa82abed2485ce7"
        },
        {
          "alg": "SHA-256",
          "content": "d2b280fc560d616ee81b48bf0fa82abed2485ce7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serve-index@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc34314f4e679318093fc760272525f94bf25c16"
        },
        {
          "alg": "SHA-256",
          "content": "dc34314f4e679318093fc760272525f94bf25c16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/batch@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs",
      "version": "0.3.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9b289316ca7df77595ef299e075f0f937eb4207"
        },
        {
          "alg": "SHA-256",
          "content": "d9b289316ca7df77595ef299e075f0f937eb4207"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sockjs@0.3.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs@0.3.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
        },
        {
          "alg": "SHA-256",
          "content": "4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5cb2556ceb85f4373c6d8238aa691c8454e13a36"
        },
        {
          "alg": "SHA-256",
          "content": "5cb2556ceb85f4373c6d8238aa691c8454e13a36"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.6.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "76899499c184b6ef754377c2dbb0cd6cb55d29e7"
        },
        {
          "alg": "SHA-256",
          "content": "76899499c184b6ef754377c2dbb0cd6cb55d29e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67e2e863797215530dff318e5bf9dcebfd47b21a"
        },
        {
          "alg": "SHA-256",
          "content": "67e2e863797215530dff318e5bf9dcebfd47b21a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028)."
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs-client",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5babe386b775e4cf14e7520911452654016c8b12"
        },
        {
          "alg": "SHA-256",
          "content": "5babe386b775e4cf14e7520911452654016c8b12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sockjs-client@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs-client@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0acede849ed7dd1ccc32c811bb11b944d4f29232"
        },
        {
          "alg": "SHA-256",
          "content": "0acede849ed7dd1ccc32c811bb11b944d4f29232"
        }
      ],
      "purl": "pkg:npm/eventsource@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventsource/-/eventsource-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventsource@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventsource/-/eventsource-0.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "original",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9147f93fa1696d04be61e01bd50baeaca656bd3b"
        },
        {
          "alg": "SHA-256",
          "content": "9147f93fa1696d04be61e01bd50baeaca656bd3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/original@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/original/-/original-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/original@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/original/-/original-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0854860422afdcfefeb6c965c662d4800169927b"
        },
        {
          "alg": "SHA-256",
          "content": "0854860422afdcfefeb6c965c662d4800169927b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf7f84f9463ff0ae51c4c4b142d95be37724d9c"
        },
        {
          "alg": "SHA-256",
          "content": "0cf7f84f9463ff0ae51c4c4b142d95be37724d9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/querystringify@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-0.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0efe18c4f56e4f40afc7e06c719fd5ee6188f38"
        },
        {
          "alg": "SHA-256",
          "content": "f0efe18c4f56e4f40afc7e06c719fd5ee6188f38"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c67f1d775d51f0a18911dd7b3ffad27bb9e5bd19"
        },
        {
          "alg": "SHA-256",
          "content": "c67f1d775d51f0a18911dd7b3ffad27bb9e5bd19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url-parse@1.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.1.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6286242112c5b712fa654e526652bf6a13ff05cb"
        },
        {
          "alg": "SHA-256",
          "content": "6286242112c5b712fa654e526652bf6a13ff05cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/querystringify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-cache",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ac5ad6832428ca55667dbdee395dad4e6db118f"
        }
      ],
      "purl": "pkg:npm/stream-cache@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-cache/-/stream-cache-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-cache@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-cache/-/stream-cache-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-middleware",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09691d0973a30ad1f82ac73a12e2087f0a4754f9"
        },
        {
          "alg": "SHA-256",
          "content": "09691d0973a30ad1f82ac73a12e2087f0a4754f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack-dev-middleware@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-middleware@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "webpack-stream",
      "version": "3.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a1d160fb11d41727b7ce6f32f722464f98b2186"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack-stream@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-stream/-/webpack-stream-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-stream@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-stream/-/webpack-stream-3.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webpack-stream"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.clone",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "195870450f5a13192478df4bc3d23d2dea1907b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.clone@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.clone/-/lodash.clone-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.clone@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.clone/-/lodash.clone-4.5.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use structuredClone instead."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.some",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bb9f314ef6b8baded13b549169b2a945eb68e4d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.some@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.some/-/lodash.some-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.some@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.some/-/lodash.some-4.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7bcc6b629e3a43e871d7e29aca6ae8a7f15cbb20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memory-fs@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ff31f53db03339e55164a9d468ee0324968fe98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-1.15.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack-stream/node_modules/.bin/webpack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d6e689b3725f86090927ccc86cd9f1635b89e2e"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f2bb25368bc121e391c2520de92969caee0a0290"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memory-fs@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "0.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29c35707c2b70e50d07482b5d202e8ed446dafd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tapable@0.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-0.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@0.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-0.1.10.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "0.6.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fecd7a18e7ce5ca6abfb953e1f86213a49f1625b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/interpret@0.6.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-0.6.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@0.6.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-0.6.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-libs-browser",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e272c0819e308935e26674408d7af0e1491b83b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-libs-browser@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-libs-browser@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-0.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-browserify",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9fc75bb4a0ed61dcf1cd5dae96eb30c9c3e506c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "067149b668df31c4b58533e02d01e806d8608e2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-0.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pbkdf2-compat",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6e0c8fa99494d94e0511575802a59a5c142f288"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2-compat@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pbkdf2-compat/-/pbkdf2-compat-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2-compat@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pbkdf2-compat/-/pbkdf2-compat-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2bf198bde167cacfa51c0a928e84b68bbe171fce"
        }
      ],
      "purl": "pkg:npm/ripemd160@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ripemd160/-/ripemd160-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sha.js",
      "version": "2.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17ddeddc5f722fb66501658895461977867315ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sha.js@2.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sha.js/-/sha.js-2.2.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack-stream/node_modules/.bin/sha.js"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sha.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4612c0c7baaee2ba7c487de4904ae122079f2ca8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack-stream/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62eaa4ab5e5ba35fdfc018275626e3c0f5e3fb0b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchpack@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-0.2.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-core",
      "version": "0.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc571588c8558da77be9efb6debdc5a3b172bdc2"
        }
      ],
      "purl": "pkg:npm/webpack-core@0.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-core/-/webpack-core-0.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-core@0.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-core/-/webpack-core-0.6.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c550b2ab5427f6b3f21f5afead88c4f5587b2106"
        },
        {
          "alg": "SHA-256",
          "content": "c550b2ab5427f6b3f21f5afead88c4f5587b2106"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-list-map@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-0.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-datetime",
      "version": "2.8.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06d4317b7734310e0e8109555526656128346132"
        },
        {
          "alg": "SHA-256",
          "content": "06d4317b7734310e0e8109555526656128346132"
        }
      ],
      "purl": "pkg:npm/react-datetime@2.8.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-datetime/-/react-datetime-2.8.10.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-datetime@2.8.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-datetime/-/react-datetime-2.8.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-datetime/css/react-datetime.css,react-datetime"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "demo/src/App.js",
            "line": 2
          },
          {
            "location": "demo/src/CustomizableExample.js",
            "line": 2
          },
          {
            "location": "demo/src/OpenExample.js",
            "line": 2
          },
          {
            "location": "demo/src/ValidatedExample.js",
            "line": 2
          },
          {
            "location": "demo/src/ValidatedExample.js",
            "line": 15
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-scripts",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "876035594742220f40ffb865a4c7e8dc0fa7ae23"
        },
        {
          "alg": "SHA-256",
          "content": "876035594742220f40ffb865a4c7e8dc0fa7ae23"
        }
      ],
      "purl": "pkg:npm/react-scripts@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-scripts/-/react-scripts-1.0.10.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-scripts@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-scripts/-/react-scripts-1.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "promise",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "489654c692616b8aa55b0724fa809bb7db49c5bf"
        },
        {
          "alg": "SHA-256",
          "content": "489654c692616b8aa55b0724fa809bb7db49c5bf"
        }
      ],
      "purl": "pkg:npm/promise@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-7.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "address",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "480081e82b587ba319459fef512f516fe03d58af"
        }
      ],
      "purl": "pkg:npm/address@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/address@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "5.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "47c68d69e86f5d953103b0074a9430dc63da5e39"
        }
      ],
      "purl": "pkg:npm/ajv@5.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/ajv@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "alphanum-sort",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
        }
      ],
      "purl": "pkg:npm/alphanum-sort@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/alphanum-sort@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anser",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5dcfc956eaa373b9c23010dd20dabec2ce19475b"
        }
      ],
      "purl": "pkg:npm/anser@1.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/anser@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anser",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c3641863a962cebef941ea2c8706f2cb4f0716bd"
        }
      ],
      "purl": "pkg:npm/anser@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/anser@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-align",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2f0c1658829739add5ebb15e6b0c6e3423f016ba"
        }
      ],
      "purl": "pkg:npm/ansi-align@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-align@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5bae52be424878dd9783e8910e3fc2922e83c81b"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-html",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "813584021962a9e9e6fd039f940d12f56ca7859e"
        }
      ],
      "purl": "pkg:npm/ansi-html@0.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-html@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c159b8d5be0f9e5a6f346dab94f16ce022161b88"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "45c6629094de4e96f693ef7eab74ae079c240fc1"
        }
      ],
      "purl": "pkg:npm/aproba@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aria-query",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "85e3152cd8cc5bab18dbed61cd9c4fce54fa79c3"
        }
      ],
      "purl": "pkg:npm/aria-query@0.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/aria-query@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-filter",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7da8cf2e26628ed732803581fd21f67cacd2eeec"
        }
      ],
      "purl": "pkg:npm/array-filter@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/array-filter@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1"
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "426bb9da84090c1838d812c8150af20a8331e296"
        }
      ],
      "purl": "pkg:npm/array-flatten@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-includes",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "184b48f62d92d7452bb31b323165c7f8bd02266d"
        }
      ],
      "purl": "pkg:npm/array-includes@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-map",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "88a2bab73d1cf7bcd5c1b118a003f66f665fa662"
        }
      ],
      "purl": "pkg:npm/array-map@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/array-map@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-reduce",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "173899d3ffd1c7d9383e4479525dbe278cab5f2b"
        }
      ],
      "purl": "pkg:npm/array-reduce@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/array-reduce@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types-flow",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f70b735c6bca1a5c9c22d982c3e39e7feba3bdad"
        }
      ],
      "purl": "pkg:npm/ast-types-flow@0.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/ast-types-flow@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2d2160c7788032e4dd6cbe2502f1f9a2c8f6cde4"
        }
      ],
      "purl": "pkg:npm/async@2.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/async@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "97bc854c7d0b979f8d6489de547a0d17fb307f6d"
        }
      ],
      "purl": "pkg:npm/autoprefixer@7.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "6.7.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1dbd1c835658e35ce3f9984099db00585c782014"
        }
      ],
      "purl": "pkg:npm/autoprefixer@6.7.7",
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@6.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "axobject-query",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "62f59dbc59c9f9242759ca349960e7a2fe3c36c0"
        }
      ],
      "purl": "pkg:npm/axobject-query@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/axobject-query@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-eslint",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b2fe2d80126470f5c19442dc757253a897710827"
        }
      ],
      "purl": "pkg:npm/babel-eslint@7.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/babel-eslint@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-builder-binary-assignment-operator-visitor",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cce4517ada356f4220bcae8a02c2b346f9a56664"
        }
      ],
      "purl": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-explode-assignable-expression",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f25b82cf7dc10433c55f70592d5746400ac22caa"
        }
      ],
      "purl": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-remap-async-to-generator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5ec581827ad723fecdd381f1c928390676e4551b"
        }
      ],
      "purl": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-jest",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e4a03b13dc10389e140fc645d09ffc4ced301671"
        }
      ],
      "purl": "pkg:npm/babel-jest@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/babel-jest@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-loader",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2e43a66bee1fff4470533d0402c8a4532fafbaf7"
        }
      ],
      "purl": "pkg:npm/babel-loader@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-loader@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-dynamic-import-node",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "adb5bc8f48a89311540395ae9f0cc3ed4b10bb2e"
        }
      ],
      "purl": "pkg:npm/babel-plugin-dynamic-import-node@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-dynamic-import-node@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-istanbul",
      "version": "4.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "18dde84bf3ce329fddf3f4103fae921456d8e587"
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@4.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-istanbul@4.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-jest-hoist",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "afedc853bd3f8dc3548ea671fbe69d03cc2c1767"
        }
      ],
      "purl": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-async-functions",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cad9cad1191b5ad634bf30ae0872391e0647be95"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-class-properties",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d7eb23b79a317f8543962c505b827c7d6cac27de"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-dynamic-import",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8d6a26229c83745a9982a441051572caa179b1da"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-exponentiation-operator",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9ee7e8337290da95288201a6a57f4170317830de"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-object-rest-spread",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fd6536f2bce13836ffa3a5458c4903a597bb3bf5"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-trailing-function-commas",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ba0360937f8d06e40180a43fe0d5616fff532cf3"
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-async-to-generator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6536e378aff6cb1d5517ac0e40eb3e9fc8d08761"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-class-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6a79763ea61d33d36f37b611aa9def81a81b46ac"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-exponentiation-operator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2ab0c9c7f3098fa48907772bb813fe41e8de3a0e"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-object-rest-spread",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "875d6bc9be761c58a2ae3feee5dc4895d8c7f921"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-object-rest-spread@6.23.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-object-rest-spread@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-constant-elements",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2f119bf4d2cdd45eb9baaae574053c604f6147dd"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-runtime",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "88490d446502ea9b8e7efb0fe09ec4d99479b1ee"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-env",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cd4ae90a6e94b709f97374b33e5f8b983556adef"
        }
      ],
      "purl": "pkg:npm/babel-preset-env@1.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-env@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-jest",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cbacaadecb5d689ca1e1de1360ebfc66862c178a"
        }
      ],
      "purl": "pkg:npm/babel-preset-jest@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-jest@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-preset-react-app",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8b744cbe47fd57c868e6f913552ceae26ae31860"
        }
      ],
      "purl": "pkg:npm/babel-preset-react-app@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-react-app@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64url",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "eac16e03ea1438eff9423d69baa36262ed1f70bb"
        }
      ],
      "purl": "pkg:npm/base64url@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/base64url@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "791420d7f551eea2897453a8a77653f96606d67c"
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bonjour",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8e890a183d8ee9a2393b3844c691a42bcf7bc9f5"
        }
      ],
      "purl": "pkg:npm/bonjour@3.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/bonjour@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boxen",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8364d4248ac34ff0ef1b2f2bf49a6c60ce0d81b6"
        }
      ],
      "purl": "pkg:npm/boxen@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/boxen@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "1.7.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0bd76704258be829b2398bb50e4b62d1a166b0b9"
        }
      ],
      "purl": "pkg:npm/browserslist@1.7.7",
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@1.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e9b4618b8a01c193f9786beea09f6fd10dbe31c3"
        }
      ],
      "purl": "pkg:npm/browserslist@2.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9ac78d3ed5d915804fd87acb158bc797147a1719"
        }
      ],
      "purl": "pkg:npm/bser@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/bser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-indexof",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f54f647c4f4e25228baa656a2e57e43d5f270982"
        }
      ],
      "purl": "pkg:npm/buffer-indexof@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-indexof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ca3c3688a4e9cf3a4cda777dc4dcbc713249cf73"
        }
      ],
      "purl": "pkg:npm/camel-case@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "308beeaffdf28119051efa1d932213c91b8f92e7"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-api",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b534e7c734c4f81ec5fbe8aca2ad24354b962c6c"
        }
      ],
      "purl": "pkg:npm/caniuse-api@1.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-api@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-db",
      "version": "1.0.30000704",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8c5aa6fed8058e65c70f2c1f5d63f7088650705c"
        }
      ],
      "purl": "pkg:npm/caniuse-db@1.0.30000704",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-db@1.0.30000704",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30000704",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "adb6ea01134515663682db93abab291d4c02946b"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30000704",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30000704",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capture-stack-trace",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4a6fa07399c26bba47f0b2496b4d0fb408c5550d"
        }
      ],
      "purl": "pkg:npm/capture-stack-trace@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/capture-stack-trace@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "case-sensitive-paths-webpack-plugin",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3d29ced8c1f124bf6f53846fb3f5894731fdc909"
        }
      ],
      "purl": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "dbec49436d2ae15f536114e76d14656cdbc0f44d"
        }
      ],
      "purl": "pkg:npm/chalk@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clap",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "59c90fe3e137104746ff19469a27a634ff68c857"
        }
      ],
      "purl": "pkg:npm/clap@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/clap@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "4.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b9aea4f85679889cf3eae8b40349ec4ebdfdd032"
        }
      ],
      "purl": "pkg:npm/clean-css@4.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@4.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-boxes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4fa917c3e59c94a004cd61f8ee509da651687143"
        }
      ],
      "purl": "pkg:npm/cli-boxes@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b35dac376479facc3e94747d41d0d0f5238ffcb5"
        }
      ],
      "purl": "pkg:npm/cli-cursor@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coa",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a9ef153660d6a86a8bdec0289a5c684d217432fd"
        }
      ],
      "purl": "pkg:npm/coa@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/coa@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1accf97dd739b983bf994d56fec8f95853641b7a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-string",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "27d46fb67025c5c2fa25993bfbf579e47841b991"
        }
      ],
      "purl": "pkg:npm/color-string@0.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/color-string@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color",
      "version": "0.11.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6d7b5c74fb65e841cd48792ad1ed5e07b904d764"
        }
      ],
      "purl": "pkg:npm/color@0.11.4",
      "type": "library",
      "bom-ref": "pkg:npm/color@0.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colormin",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ea2f7420a72b96881a38aae59ec124a6f7298133"
        }
      ],
      "purl": "pkg:npm/colormin@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/colormin@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "168a4701756b6a7f51a12ce0c97bfa28c084ed63"
        }
      ],
      "purl": "pkg:npm/colors@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "157152fd1e7a6c8d98a5b715cf376df928004563"
        }
      ],
      "purl": "pkg:npm/commander@2.11.0",
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "737a3a7036e9886102aa6099e47bb33ab1aba1a1"
        }
      ],
      "purl": "pkg:npm/configstore@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/configstore@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "contains-path",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fe8cf184ff6670b6baef01a9d4861a5cbec4120a"
        }
      ],
      "purl": "pkg:npm/contains-path@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/contains-path@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cosmiconfig",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6173cebd56fac042c1f4390edf7af6c07c7cb892"
        }
      ],
      "purl": "pkg:npm/cosmiconfig@2.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-error-class",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "06be7abef947a3f14a30fd610671d401bca8b7b6"
        }
      ],
      "purl": "pkg:npm/create-error-class@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/create-error-class@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7b9247621c23adfdd3856004a823cbe397424d41"
        }
      ],
      "purl": "pkg:npm/cross-spawn@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-color-names",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "808adc2e79cf84738069b646cb20ec27beb629e0"
        }
      ],
      "purl": "pkg:npm/css-color-names@0.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/css-color-names@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-loader",
      "version": "0.28.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6cf3579192ce355e8b38d5f42dd7a1f2ec898d0f"
        }
      ],
      "purl": "pkg:npm/css-loader@0.28.4",
      "type": "library",
      "bom-ref": "pkg:npm/css-loader@0.28.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-selector-tokenizer",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e6988474ae8c953477bf5e7efecfceccd9cf4c86"
        }
      ],
      "purl": "pkg:npm/css-selector-tokenizer@0.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/css-selector-tokenizer@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssesc",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c814903e45623371a0477b40109aaafbeeaddbb4"
        }
      ],
      "purl": "pkg:npm/cssesc@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssnano",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4f38f6cea2b9b17fa01490f23f1dc68ea65c1c38"
        }
      ],
      "purl": "pkg:npm/cssnano@3.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/cssnano@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csso",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ddd52c587033f49e94b71fc55569f252e8ff5f85"
        }
      ],
      "purl": "pkg:npm/csso@2.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/csso@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "988df33feab191ef799a61369dd76c17adf957ea"
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "damerau-levenshtein",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "03191c432cb6eea168bb77f3a55ffdccb8978514"
        }
      ],
      "purl": "pkg:npm/damerau-levenshtein@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/damerau-levenshtein@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defined",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c98d9bcef75674188e110969151199e39b1fa693"
        }
      ],
      "purl": "pkg:npm/defined@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/defined@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "53ecf699ffcbcb39637691ab13baf160819766e5"
        }
      ],
      "purl": "pkg:npm/del@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/del@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-node",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a2033c09cc8e158d37748fbde7507832bd6ce127"
        }
      ],
      "purl": "pkg:npm/detect-node@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/detect-node@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-port-alt",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a4d2f061d757a034ecf37c514260a98750f2b131"
        }
      ],
      "purl": "pkg:npm/detect-port-alt@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/detect-port-alt@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b39e7f1da6eb0a75ba9c17324b34753c47e0654d"
        }
      ],
      "purl": "pkg:npm/dns-equal@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/dns-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-packet",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2369d45038af045f3898e6fa56862aed3f40296c"
        }
      ],
      "purl": "pkg:npm/dns-packet@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/dns-packet@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-txt",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b91d806f5d27188e4ab3e7d107d881a1cc4642b6"
        }
      ],
      "purl": "pkg:npm/dns-txt@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/dns-txt@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "379dce730f6166f76cefa4e6707a159b02c5a6fa"
        }
      ],
      "purl": "pkg:npm/doctrine@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-converter",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a45ef5727b890c9bffe6d7c876e7b19cb0e17f3b"
        }
      ],
      "purl": "pkg:npm/dom-converter@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/dom-converter@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-urls",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "001ddf81628cd1e706125c7176f53ccec55d918e"
        }
      ],
      "purl": "pkg:npm/dom-urls@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/dom-urls@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d2646f5e57f6c3bab11cf6cb05d3c0acf7412594"
        }
      ],
      "purl": "pkg:npm/domhandler@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bddc3de099b9a2efacc51c623f28f416ecc57485"
        }
      ],
      "purl": "pkg:npm/domutils@1.1.6",
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1b708af094a49c9a0e7dbcad790aba539dac1177"
        }
      ],
      "purl": "pkg:npm/dot-prop@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "864ef1379aced55ce6f95debecdce179f7a0cd1d"
        }
      ],
      "purl": "pkg:npm/dotenv@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/dotenv@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8b12dab878c0d69e3e7891051662a32fc6bddcc1"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.3.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d0e026735754770901ae301a21664cba45d92f7d"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.3.16",
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.3.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c1699e17f34154f7922219ea712ea76a2619c77b"
        }
      ],
      "purl": "pkg:npm/emoji-regex@6.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8811e90915d9a0dba36274f0b242dbda78f9c92a"
        }
      ],
      "purl": "pkg:npm/es6-promise@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-react-app",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "98337597bc01cc22991fcbdda07451f3b4511718"
        }
      ],
      "purl": "pkg:npm/eslint-config-react-app@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-react-app@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5add8106e8c928db2cba232bcd9efa846e3da16c"
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-loader",
      "version": "1.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "50b158dd6272dcefb97e984254837f81a5802ce0"
        }
      ],
      "purl": "pkg:npm/eslint-loader@1.7.1",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-loader@1.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "abaec824177613b8a95b299639e1b6facf473449"
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-flowtype",
      "version": "2.34.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b9875f314652e5081623c9d2b18a346bbb759c09"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-flowtype@2.34.0",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-flowtype@2.34.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "72ba306fad305d67c4816348a4699a4229ac8b4e"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-jsx-a11y",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4a939f76ec125010528823331bf948cc573380b6"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-jsx-a11y@5.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-jsx-a11y@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-react",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "27770acf39f5fd49cd0af4083ce58104eb390d4c"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react@7.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "external-editor",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1ed9199da9cbfe2ef2f7a31b2fde8b0d12368972"
        }
      ],
      "purl": "pkg:npm/external-editor@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-text-webpack-plugin",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "756ef4efa8155c3681833fbc34da53b941746d6c"
        }
      ],
      "purl": "pkg:npm/extract-text-webpack-plugin@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/extract-text-webpack-plugin@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "96256a3bc975595eb36d82e9929d060d893439ff"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastparse",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d1e2643b38a94d7583b479060e6c4affc94071f8"
        }
      ],
      "purl": "pkg:npm/fastparse@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/fastparse@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fb-watchman",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "54e9abf7dfa2f26cd9b1636c588c1afc05de5d58"
        }
      ],
      "purl": "pkg:npm/fb-watchman@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fb-watchman@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3ab1a2d2a62c8bfb431a0c94cb797a2fce27c962"
        }
      ],
      "purl": "pkg:npm/figures@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/figures@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-loader",
      "version": "0.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4ff1df28af38719a6098093b88c82c71d1794a34"
        }
      ],
      "purl": "pkg:npm/file-loader@0.11.2",
      "type": "library",
      "bom-ref": "pkg:npm/file-loader@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filesize",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "53149ea3460e3b2e024962a51648aa572cf98122"
        }
      ],
      "purl": "pkg:npm/filesize@3.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/filesize@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filled-array",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c3c4f6c663b923459a9aa29912d2d031f1507f84"
        }
      ],
      "purl": "pkg:npm/filled-array@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/filled-array@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flatten",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "dae46a9d78fbe25292258cc1e780a41d95c03782"
        }
      ],
      "purl": "pkg:npm/flatten@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/flatten@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3794f378c58b342ea7dbbb23095109c4b3b62291"
        }
      ],
      "purl": "pkg:npm/fs-extra@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "0.30.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f233ffcc08d4da7d432daa449776989db1df93f0"
        }
      ],
      "purl": "pkg:npm/fs-extra@0.30.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@0.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3282b713fb3ad80ede0e9fcf4611b5aa6fc033f4"
        }
      ],
      "purl": "pkg:npm/fsevents@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gh-pages",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4a46f4c25439f7a2b7e6835504d4a49e949f04ca"
        }
      ],
      "purl": "pkg:npm/gh-pages@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/gh-pages@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f5a6d70e8395e21c858fb0489d64df02424d506c"
        }
      ],
      "purl": "pkg:npm/globby@6.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/globby@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5f81635a61e4a6589f180569ea4e381680a51f35"
        }
      ],
      "purl": "pkg:npm/got@5.7.1",
      "type": "library",
      "bom-ref": "pkg:npm/got@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gzip-size",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "546188e9bdc337f673772f81660464b389dce520"
        }
      ],
      "purl": "pkg:npm/gzip-size@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/gzip-size@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handle-thing",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fd7aad726bf1a5fd16dfc29b2f7a6601d27139c4"
        }
      ],
      "purl": "pkg:npm/handle-thing@1.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/handle-thing@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e8207af1cc7b30d446cc70b734b5e8be18f88d51"
        }
      ],
      "purl": "pkg:npm/has-flag@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "93410fd21b009735151f8868c2f271f3427e23fd"
        }
      ],
      "purl": "pkg:npm/he@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/he@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hpack.js",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "87774c0949e513f42e84575b3c45681fade2a0b2"
        }
      ],
      "purl": "pkg:npm/hpack.js@2.1.6",
      "type": "library",
      "bom-ref": "pkg:npm/hpack.js@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-comment-regex",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "668b93776eaae55ebde8f3ad464b307a4963625e"
        }
      ],
      "purl": "pkg:npm/html-comment-regex@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/html-comment-regex@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-entities",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0df29351f0721163515dfb9e5543e5f6eed5162f"
        }
      ],
      "purl": "pkg:npm/html-entities@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/html-entities@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-minifier",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4a275e3b1a16639abb79b4c11191ff0d0fcf1ab9"
        }
      ],
      "purl": "pkg:npm/html-minifier@3.5.3",
      "type": "library",
      "bom-ref": "pkg:npm/html-minifier@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-webpack-plugin",
      "version": "2.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e987f421853d3b6938c8c4c8171842e5fd17af23"
        }
      ],
      "purl": "pkg:npm/html-webpack-plugin@2.29.0",
      "type": "library",
      "bom-ref": "pkg:npm/html-webpack-plugin@2.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cc70d05a59f6542e43f0e685c982e14c924a9efe"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "http-deceiver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fa7168944ab9a519d337cb0bec7284dc3e723d87"
        }
      ],
      "purl": "pkg:npm/http-deceiver@1.2.7",
      "type": "library",
      "bom-ref": "pkg:npm/http-deceiver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "icss-replace-symbols",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "06ea6f83679a7749e386cfe1fe812ae5db223ded"
        }
      ],
      "purl": "pkg:npm/icss-replace-symbols@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/icss-replace-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "icss-utils",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "83f0a0ec378bf3246178b6c2ad9136f135b1c962"
        }
      ],
      "purl": "pkg:npm/icss-utils@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/icss-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8e2d48348742121b4a8218b7a137e9a52049dc80"
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexes-of",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f30f716c8e2bd346c7b67d3df3915566a7c05607"
        }
      ],
      "purl": "pkg:npm/indexes-of@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/indexes-of@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "87621c4fba4072f48a8dd71c9f9df6f100b2d534"
        }
      ],
      "purl": "pkg:npm/inquirer@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internal-ip",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ae9fbf93b984878785d50a8de1b356956058cf5c"
        }
      ],
      "purl": "pkg:npm/internal-ip@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/internal-ip@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bdded70114290828c0a039e72ef25f5aaec4354a"
        }
      ],
      "purl": "pkg:npm/ip@1.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/ip@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute-url",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "50530dfb84fcc9aa7dbe7852e83a37b93b9f2aa6"
        }
      ],
      "purl": "pkg:npm/is-absolute-url@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute-url@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-directory",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "61339b6f2475fc772fd9c9d83f5c8575dc154ae1"
        }
      ],
      "purl": "pkg:npm/is-directory@0.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-directory@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-npm",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f2fb63a65e4905b406c86072765a1a4dc793b9f4"
        }
      ],
      "purl": "pkg:npm/is-npm@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-npm@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "71a50c8429dfca773c92a390a4a03b39fcd51d3e"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-redirect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1d03dded53bd8db0f30c26e4f95d36fc7c87dc24"
        }
      ],
      "purl": "pkg:npm/is-redirect@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-redirect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "11a060568b67339444033d0125a61a20d564fb34"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-root",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "07b6c233bc394cd9d02ba15c966bd6660d6342d5"
        }
      ],
      "purl": "pkg:npm/is-root@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-root@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-svg",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cf61090da0d9efbcab8722deba6f032208dbb0e9"
        }
      ],
      "purl": "pkg:npm/is-svg@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-svg@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1f16e4aa22b04d1336b66188a66af3c600c3a66d"
        }
      ],
      "purl": "pkg:npm/is-wsl@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-changed-files",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9394d5cc65c438406149bef1bf4d52b68e03e3f8"
        }
      ],
      "purl": "pkg:npm/jest-changed-files@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-changed-files@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-cli",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e532b19d88ae5bc6c417e8b0593a6fe954b1dc93"
        }
      ],
      "purl": "pkg:npm/jest-cli@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest-cli@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-config",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e37930ab2217c913605eff13e7bd763ec48faeea"
        }
      ],
      "purl": "pkg:npm/jest-config@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest-config@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-diff",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "81f288fd9e675f0fb23c75f1c2b19445fe586617"
        }
      ],
      "purl": "pkg:npm/jest-diff@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-diff@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-docblock",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "17bea984342cc33d83c50fbe1545ea0efaa44712"
        }
      ],
      "purl": "pkg:npm/jest-docblock@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-docblock@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-jsdom",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "048a8ac12ee225f7190417713834bb999787de99"
        }
      ],
      "purl": "pkg:npm/jest-environment-jsdom@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-jsdom@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-node",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d488bc4612af2c246e986e8ae7671a099163d403"
        }
      ],
      "purl": "pkg:npm/jest-environment-node@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-node@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-haste-map",
      "version": "20.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "abad74efb1a005974a7b6517e11010709cab9112"
        }
      ],
      "purl": "pkg:npm/jest-haste-map@20.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/jest-haste-map@20.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-jasmine2",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fcc5b1411780d911d042902ef1859e852e60d5e1"
        }
      ],
      "purl": "pkg:npm/jest-jasmine2@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest-jasmine2@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-matcher-utils",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b3a6b8e37ca577803b0832a98b164f44b7815612"
        }
      ],
      "purl": "pkg:npm/jest-matcher-utils@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-matcher-utils@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-matchers",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ca69db1c32db5a6f707fa5e0401abb55700dfd60"
        }
      ],
      "purl": "pkg:npm/jest-matchers@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-matchers@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-message-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6aec2844306fcb0e6e74d5796c1006d96fdd831c"
        }
      ],
      "purl": "pkg:npm/jest-message-util@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-message-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-mock",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8bc070e90414aa155c11a8d64c869a0d5c71da59"
        }
      ],
      "purl": "pkg:npm/jest-mock@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-mock@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-regex-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "85bbab5d133e44625b19faf8c6aa5122d085d762"
        }
      ],
      "purl": "pkg:npm/jest-regex-util@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-regex-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-resolve-dependencies",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6e14a7b717af0f2cb3667c549de40af017b1723a"
        }
      ],
      "purl": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-resolve",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9448b3e8b6bafc15479444c6499045b7ffe597a5"
        }
      ],
      "purl": "pkg:npm/jest-resolve@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-runtime",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a2c802219c4203f754df1404e490186169d124d8"
        }
      ],
      "purl": "pkg:npm/jest-runtime@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest-runtime@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-snapshot",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5b847e1adb1a4d90852a7f9f125086e187c76566"
        }
      ],
      "purl": "pkg:npm/jest-snapshot@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-snapshot@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0c07f7d80d82f4e5a67c6f8b9c3fe7f65cfd32ad"
        }
      ],
      "purl": "pkg:npm/jest-util@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-validate",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d0cfd1de4f579f298484925c280f8f1d94ec3cab"
        }
      ],
      "purl": "pkg:npm/jest-validate@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/jest-validate@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3dd260c2989d6dad678b1e9cc4d91944f6d602ac"
        }
      ],
      "purl": "pkg:npm/jest@20.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/jest@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "js-base64",
      "version": "2.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f0e80ae039a4bd654b5f281fc93f04a914a7fcce"
        }
      ],
      "purl": "pkg:npm/js-base64@2.1.9",
      "type": "library",
      "bom-ref": "pkg:npm/js-base64@2.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5c967ddd837a9bfdca5f2de84253abe8a1c03b80"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jschardet",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a61f310306a5a71188e1b1acd08add3cfbb08b1e"
        }
      ],
      "purl": "pkg:npm/jschardet@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/jschardet@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "349a6d44c53a51de89b40805c5d5e59b417d3340"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3736a2b428b87bbda0cc83b53fa3d633a35c2ae8"
        }
      ],
      "purl": "pkg:npm/jsonfile@2.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a5ecc6f65f53f662c4415c7675a0331d0992ec66"
        }
      ],
      "purl": "pkg:npm/jsonfile@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsx-ast-utils",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3867213e8dd79bf1e8f2300c0cfc1efb182c0df1"
        }
      ],
      "purl": "pkg:npm/jsx-ast-utils@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsx-ast-utils@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "klaw",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4088433b46b3b1ba259d78785d8e96f73ba02439"
        }
      ],
      "purl": "pkg:npm/klaw@1.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/klaw@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "56f8d6139620847b8017f8f1f4d78e211324168b"
        }
      ],
      "purl": "pkg:npm/latest-version@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-req",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bdaebead30f8d824039ce0ce149d4daa07ba1fac"
        }
      ],
      "purl": "pkg:npm/lazy-req@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/lazy-req@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "leven",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c2e7a9f772094dee9d34202ae8acce4687875580"
        }
      ],
      "purl": "pkg:npm/leven@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/leven@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-fs-cache",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "56e0bf08bd9708b26a765b68509840c8dec9fdbc"
        }
      ],
      "purl": "pkg:npm/loader-fs-cache@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/loader-fs-cache@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c98aef488bcceda2ffb5e2de646d6a754429f5cd"
        }
      ],
      "purl": "pkg:npm/loader-utils@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b28aa6288a2b9fc651035c7711f65ab6190331a6"
        }
      ],
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.cond",
      "version": "4.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f471a1da486be60f6ab955d17115523dd1d255d5"
        }
      ],
      "purl": "pkg:npm/lodash.cond@4.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.cond@4.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d09178716ffea4dde9e5fb7b37f6f0802274580c"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.memoize",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
        }
      ],
      "purl": "pkg:npm/lodash.memoize@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e73a0385c8355591746e020b99679c690e68fba0"
        }
      ],
      "purl": "pkg:npm/lodash.template@4.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2b4d4e95ba440d915ff08bc899e4553666713316"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.uniq",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d0225373aeb652adc1bc82e4945339a842754773"
        }
      ],
      "purl": "pkg:npm/lodash.uniq@4.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.uniq@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5b46f80147edee578870f086d04821cf998e551f"
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
        }
      ],
      "purl": "pkg:npm/lower-case@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4e3366b39e7f5457e35f1324bdf6f88d0bfc7306"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "macaddress",
      "version": "0.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5904dc537c39ec6dbefeae902327135fa8511f12"
        }
      ],
      "purl": "pkg:npm/macaddress@0.2.8",
      "type": "library",
      "bom-ref": "pkg:npm/macaddress@0.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "math-expression-evaluator",
      "version": "1.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "de819fdbcd84dccd8fae59c6aeb79615b9d266ac"
        }
      ],
      "purl": "pkg:npm/math-expression-evaluator@1.2.17",
      "type": "library",
      "bom-ref": "pkg:npm/math-expression-evaluator@1.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "72cb668b425228290abbfa856892587308a801fb"
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "48d26d235589651704ac5916ca06001914266878"
        }
      ],
      "purl": "pkg:npm/mime-db@1.29.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "591d84d3653a6b0b4a3b9df8de5aa8108e72e5e0"
        }
      ],
      "purl": "pkg:npm/mime@1.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e667783d92e89dbd342818b5230b9d62a672ad18"
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2a4e4090b96b2db06a9d7df01055a62a77c9b774"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns-service-types",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "899f11d9686e5e05cb91b35d5f0e63b773cfc901"
        }
      ],
      "purl": "pkg:npm/multicast-dns-service-types@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6e7de86a570872ab17058adea7160bbeca814dde"
        }
      ],
      "purl": "pkg:npm/multicast-dns@6.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3075ce93bc21b8fab43e1bc4da7e8115ed1e7bab"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e4ff34e6c95fdfb5aecc08de6596f43605a7db45"
        }
      ],
      "purl": "pkg:npm/nan@2.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ncname",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5b57ad18b1ca092864ef62b0b1ed8194f383b71c"
        }
      ],
      "purl": "pkg:npm/ncname@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ncname@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "no-case",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7aeba1c73a52184265554b7dc03baf720df80081"
        }
      ],
      "purl": "pkg:npm/no-case@2.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/no-case@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-forge",
      "version": "0.6.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "463811879f573d45155ad6a9f43dc296e8e85ebc"
        }
      ],
      "purl": "pkg:npm/node-forge@0.6.33",
      "type": "library",
      "bom-ref": "pkg:npm/node-forge@0.6.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-notifier",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2fa9e12605fa10009d44549d6fcd8a63dde0e4ff"
        }
      ],
      "purl": "pkg:npm/node-notifier@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/node-notifier@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.6.36",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "db604112cb74e0d477554e9b505b17abddfab786"
        }
      ],
      "purl": "pkg:npm/node-pre-gyp@0.6.36",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.6.36",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-status-codes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5ae5541d024645d32a58fcddc9ceecea7ae3ac2f"
        }
      ],
      "purl": "pkg:npm/node-status-codes@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/node-status-codes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-range",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2d10c06bdfd312ea9777695a4d28439456b75942"
        }
      ],
      "purl": "pkg:npm/normalize-range@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-range@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-url",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2cc0d66b31ea23036458436e3620d85954c66c3c"
        }
      ],
      "purl": "pkg:npm/normalize-url@1.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "08a7f2a8bf734604779a9efa4ad5cc717abb954b"
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "num2fraction",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6f682b6a027a4e9ddfa4564cd2589d1d4e669ede"
        }
      ],
      "purl": "pkg:npm/num2fraction@1.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/num2fraction@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-hash",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "28a659cf987d96a4dabe7860289f3b5326c4a03c"
        }
      ],
      "purl": "pkg:npm/object-hash@1.1.8",
      "type": "library",
      "bom-ref": "pkg:npm/object-hash@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "obuf",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "104124b6c602c6796881a042541d36db43a5264e"
        }
      ],
      "purl": "pkg:npm/obuf@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/obuf@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "067428230fd67443b2794b22bba528b6867962d4"
        }
      ],
      "purl": "pkg:npm/onetime@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/onetime@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7abc22e644dff63b0a96d5ab7f2790c0f01abc95"
        }
      ],
      "purl": "pkg:npm/opn@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/opn@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "72ce2306a17dbea58ff1041853352b4a8fc77519"
        }
      ],
      "purl": "pkg:npm/opn@5.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/opn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b07ff2d9a5d88bec806035895a2bab66a27988bc"
        }
      ],
      "purl": "pkg:npm/p-limit@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-map",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "05f5e4ae97a068371bc2a5cc86bfbdbc19c4ae7a"
        }
      ],
      "purl": "pkg:npm/p-map@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/p-map@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0d15bd67d1cbbddbb2ca222ff2edb86bcb31a8bb"
        }
      ],
      "purl": "pkg:npm/package-json@2.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/package-json@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "df94fd8cf6531ecf75e6bef9a0858fbc72be2247"
        }
      ],
      "purl": "pkg:npm/param-case@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/param-case@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "59fde0f435badacba103a84e9d3bc64e96b9937d"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@1.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-up",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3e08fb461525c4421624a33b9f7e6d0af5b05a26"
        }
      ],
      "purl": "pkg:npm/pkg-up@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/pkg-up@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portfinder",
      "version": "1.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bb32ecd87c27104ae6ee44b5a3ccbf0ebb1aede9"
        }
      ],
      "purl": "pkg:npm/portfinder@1.0.13",
      "type": "library",
      "bom-ref": "pkg:npm/portfinder@1.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-calc",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "77bae7ca928ad85716e2fda42f261bf7c1d65b5e"
        }
      ],
      "purl": "pkg:npm/postcss-calc@5.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-calc@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-colormin",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6631417d5f0e909a3d7ec26b24c8a8d1e4f96e4b"
        }
      ],
      "purl": "pkg:npm/postcss-colormin@2.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-colormin@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-convert-values",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bbd8593c5c1fd2e3d1c322bb925dcae8dae4d62d"
        }
      ],
      "purl": "pkg:npm/postcss-convert-values@2.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-convert-values@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-comments",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "befe89fafd5b3dace5ccce51b76b81514be00e3d"
        }
      ],
      "purl": "pkg:npm/postcss-discard-comments@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-comments@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-duplicates",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b9abf27b88ac188158a5eb12abcae20263b91932"
        }
      ],
      "purl": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-empty",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d2b4bd9d5ced5ebd8dcade7640c7d7cd7f4f92b5"
        }
      ],
      "purl": "pkg:npm/postcss-discard-empty@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-empty@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-overridden",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8b1eaf554f686fb288cd874c55667b0aa3668d58"
        }
      ],
      "purl": "pkg:npm/postcss-discard-overridden@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-overridden@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-unused",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bce30b2cc591ffc634322b5fb3464b6d934f4433"
        }
      ],
      "purl": "pkg:npm/postcss-discard-unused@2.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-unused@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-filter-plugins",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6d85862534d735ac420e4a85806e1f5d4286d84c"
        }
      ],
      "purl": "pkg:npm/postcss-filter-plugins@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-filter-plugins@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-flexbugs-fixes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7b31cb6c27d0417a35a67914c295f83c403c7ed4"
        }
      ],
      "purl": "pkg:npm/postcss-flexbugs-fixes@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-flexbugs-fixes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-config",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "539e9afc9ddc8620121ebf9d8c3673e0ce50d28a"
        }
      ],
      "purl": "pkg:npm/postcss-load-config@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-config@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-options",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b098b1559ddac2df04bc0bb375f99a5cfe2b6d8c"
        }
      ],
      "purl": "pkg:npm/postcss-load-options@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-options@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-plugins",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "745768116599aca2f009fad426b00175049d8d92"
        }
      ],
      "purl": "pkg:npm/postcss-load-plugins@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-plugins@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-loader",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8c7e0055a3df1889abc6bad52dd45b2f41bbc6fc"
        }
      ],
      "purl": "pkg:npm/postcss-loader@2.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-loader@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-idents",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4c5530313c08e1d5b3bbf3d2bbc747e278eea270"
        }
      ],
      "purl": "pkg:npm/postcss-merge-idents@2.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-idents@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-longhand",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "23d90cd127b0a77994915332739034a1a4f3d658"
        }
      ],
      "purl": "pkg:npm/postcss-merge-longhand@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-longhand@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-rules",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d1df5dfaa7b1acc3be553f0e9e10e87c61b5f721"
        }
      ],
      "purl": "pkg:npm/postcss-merge-rules@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-rules@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-message-helpers",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a4f2f4fab6e4fe002f0aed000478cdf52f9ba60e"
        }
      ],
      "purl": "pkg:npm/postcss-message-helpers@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-message-helpers@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-font-values",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4b58edb56641eba7c8474ab3526cafd7bbdecb69"
        }
      ],
      "purl": "pkg:npm/postcss-minify-font-values@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-font-values@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-gradients",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5dbda11373703f83cfb4a3ea3881d8d75ff5e6e1"
        }
      ],
      "purl": "pkg:npm/postcss-minify-gradients@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-gradients@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-params",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ad2ce071373b943b3d930a3fa59a358c28d6f1f3"
        }
      ],
      "purl": "pkg:npm/postcss-minify-params@1.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-params@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-selectors",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b2c6a98c0072cf91b932d1a496508114311735bf"
        }
      ],
      "purl": "pkg:npm/postcss-minify-selectors@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-selectors@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-extract-imports",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "66140ecece38ef06bf0d3e355d69bf59d141ea85"
        }
      ],
      "purl": "pkg:npm/postcss-modules-extract-imports@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-extract-imports@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-local-by-default",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f7d80c398c5a393fa7964466bd19500a7d61c069"
        }
      ],
      "purl": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-scope",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d6ea64994c79f97b62a72b426fbe6056a194bb90"
        }
      ],
      "purl": "pkg:npm/postcss-modules-scope@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-scope@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-values",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ecffa9d7e192518389f42ad0e83f72aec456ea20"
        }
      ],
      "purl": "pkg:npm/postcss-modules-values@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-values@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-charset",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ef9ee71212d7fe759c78ed162f61ed62b5cb93f1"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-charset@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-charset@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-url",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "108f74b3f2fcdaf891a2ffa3ea4592279fc78222"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-url@3.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-url@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-ordered-values",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "eec6c2a67b6c412a8db2042e77fe8da43f95c11d"
        }
      ],
      "purl": "pkg:npm/postcss-ordered-values@2.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-ordered-values@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-idents",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c2c6d20cc958284f6abfbe63f7609bf409059ad3"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-idents@2.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-idents@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-initial",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "68f80695f045d08263a879ad240df8dd64f644ea"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-initial@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-initial@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-transforms",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ff76f4d8212437b31c298a42d2e1444025771ae1"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f9437788606c3c9acee16ffe8d8b16297f27bb90"
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@2.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "postcss-svgo",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b6df18aa613b666e133f08adb5219c2684ac108d"
        }
      ],
      "purl": "pkg:npm/postcss-svgo@2.1.6",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-svgo@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-unique-selectors",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "981d57d29ddcb33e7b1dfe1fd43b8649f933ca1d"
        }
      ],
      "purl": "pkg:npm/postcss-unique-selectors@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-unique-selectors@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-value-parser",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "87f38f9f18f774a4ab4c8a232f5c5ce8872a9d15"
        }
      ],
      "purl": "pkg:npm/postcss-value-parser@3.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-value-parser@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "postcss-zindex",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d2109ddc055b91af67fc4cb3b025946639d2af22"
        }
      ],
      "purl": "pkg:npm/postcss-zindex@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/postcss-zindex@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "5.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cf4f597b864d65c8a492b2eabe9d706c879c388b"
        }
      ],
      "purl": "pkg:npm/postcss@5.2.17",
      "type": "library",
      "bom-ref": "pkg:npm/postcss@5.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "6.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "89067a9ce8b11f8a84cbc5117efc30419a0857b3"
        }
      ],
      "purl": "pkg:npm/postcss@6.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/postcss@6.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
        }
      ],
      "purl": "pkg:npm/prepend-http@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b2bf82e7350d65c6c33aa95aaa5a4f6327f61cd9"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-error",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5f4f87c8f91e5ae3f3ba87ab4cf5e03b1a17f1a3"
        }
      ],
      "purl": "pkg:npm/pretty-error@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/pretty-error@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-format",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "020e350a560a1fe1a98dc3beb6ccffb386de8b14"
        }
      ],
      "purl": "pkg:npm/pretty-format@20.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "dd01bac9d06d30e6f219aecb8253ee9ebdc308f1"
        }
      ],
      "purl": "pkg:npm/q@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/q@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "query-string",
      "version": "4.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bbb693b9ca915c232515b228b1a02b609043dbeb"
        }
      ],
      "purl": "pkg:npm/query-string@4.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/query-string@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dev-utils",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1a42263e9b6aa11dcb45d69dfe5eb1b354bd5531"
        }
      ],
      "purl": "pkg:npm/react-dev-utils@3.0.2",
      "type": "framework",
      "bom-ref": "pkg:npm/react-dev-utils@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-error-overlay",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "988e48f6f343afa97a719c4ddae51b8fe8ccfee8"
        }
      ],
      "purl": "pkg:npm/react-error-overlay@1.0.9",
      "type": "framework",
      "bom-ref": "pkg:npm/react-error-overlay@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-onclickoutside",
      "version": "5.11.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "00314e52567cf55faba94cabbacd119619070623"
        }
      ],
      "purl": "pkg:npm/react-onclickoutside@5.11.1",
      "type": "framework",
      "bom-ref": "pkg:npm/react-onclickoutside@5.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "react-onclickoutside"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "DateTime.js",
            "line": 9
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "read-all-stream",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "35c3e177f2078ef789ee4bfafa4373074eaef4fa"
        }
      ],
      "purl": "pkg:npm/read-all-stream@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-all-stream@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recursive-readdir",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "90ef231d0778c5ce093c9a48d74e5c5422d13a99"
        }
      ],
      "purl": "pkg:npm/recursive-readdir@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/recursive-readdir@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-css-calc",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "747c914e049614a4c9cfbba629871ad1d2927716"
        }
      ],
      "purl": "pkg:npm/reduce-css-calc@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/reduce-css-calc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-function-call",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5a200bf92e0e37751752fe45b0ab330fd4b6be99"
        }
      ],
      "purl": "pkg:npm/reduce-function-call@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/reduce-function-call@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "86a763f58ee4d7c2f6b102e4764050de7ed90c6b"
        }
      ],
      "purl": "pkg:npm/regexpu-core@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fb0d3289ee0d9ada2cbb52af5dfe66cb070d3006"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3d4ef870f73dde1d77f0cf9a381432444e174942"
        }
      ],
      "purl": "pkg:npm/registry-url@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "relateurl",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "54dbf377e51440aca90a4cd274600d3ff2d888a9"
        }
      ],
      "purl": "pkg:npm/relateurl@0.2.7",
      "type": "library",
      "bom-ref": "pkg:npm/relateurl@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "renderkid",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "898cabfc8bede4b7b91135a3ffd323e58c0db319"
        }
      ],
      "purl": "pkg:npm/renderkid@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/renderkid@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "529c9ccef27380adfec9a2f965b649bbee636418"
        }
      ],
      "purl": "pkg:npm/require-from-string@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9f7ee287f82fd326d4fd162923d62129eee0dfaf"
        }
      ],
      "purl": "pkg:npm/restore-cursor@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0371ab4ae0bdd720d4166d7dfda64ff7a445a6c0"
        }
      ],
      "purl": "pkg:npm/run-async@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/run-async@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx-lite-aggregates",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "753b87a89a11c95467c4ac1626c4efc4e05c67be"
        }
      ],
      "purl": "pkg:npm/rx-lite-aggregates@4.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/rx-lite-aggregates@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx-lite",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0b1e11af8bc44836f04a6407e92da42467b79444"
        }
      ],
      "purl": "pkg:npm/rx-lite@4.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/rx-lite@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sane",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9610c452307a135d29c1fdfe2547034180c46775"
        }
      ],
      "purl": "pkg:npm/sane@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/sane@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f5877222ce3e931edae039f17eb3716e7137f8cf"
        }
      ],
      "purl": "pkg:npm/schema-utils@0.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "select-hose",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "625d8658f865af43ec962bfc376a37359a4994ca"
        }
      ],
      "purl": "pkg:npm/select-hose@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/select-hose@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selfsigned",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cdda4492d70d486570f87c65546023558e1dfa5a"
        }
      ],
      "purl": "pkg:npm/selfsigned@1.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/selfsigned@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4bbb8437c8d37e4b0cf1a68fd726ec6d645d6d36"
        }
      ],
      "purl": "pkg:npm/semver-diff@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serviceworker-cache-polyfill",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "de19ee73bef21ab3c0740a37b33db62464babdeb"
        }
      ],
      "purl": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "settle-promise",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "697adb58b821f387ce2757c06efc9de5f0ee33d8"
        }
      ],
      "purl": "pkg:npm/settle-promise@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/settle-promise@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shell-quote",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f4781949cce402697127430ea3b3c5476f481767"
        }
      ],
      "purl": "pkg:npm/shell-quote@1.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slide",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707"
        }
      ],
      "purl": "pkg:npm/slide@1.1.6",
      "type": "library",
      "bom-ref": "pkg:npm/slide@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs-client",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f0212a8550e4c9468c8cceaeefd2e3493c033ad5"
        }
      ],
      "purl": "pkg:npm/sockjs-client@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/sockjs-client@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sort-keys",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "441b6d4d346798f1b4e49e8920adfba0e543f9ad"
        }
      ],
      "purl": "pkg:npm/sort-keys@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/sort-keys@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9889019d1024cce55cdc069498337ef6186a11a1"
        }
      ],
      "purl": "pkg:npm/source-list-map@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy-transport",
      "version": "2.0.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "735e72054c486b2354fe89e702256004a39ace4d"
        }
      ],
      "purl": "pkg:npm/spdy-transport@2.0.20",
      "type": "library",
      "bom-ref": "pkg:npm/spdy-transport@2.0.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy",
      "version": "3.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "42ff41ece5cc0f99a3a6c28aabb73f5c3b03acbc"
        }
      ],
      "purl": "pkg:npm/spdy@3.4.7",
      "type": "library",
      "bom-ref": "pkg:npm/spdy@3.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strict-uri-encode",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "279b225df1d582b1f54e65addd4352e18faa0713"
        }
      ],
      "purl": "pkg:npm/strict-uri-encode@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/strict-uri-encode@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "56970fb1c38558e9e70b728bf3de269ac45adfac"
        }
      ],
      "purl": "pkg:npm/string-length@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/string-length@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "style-loader",
      "version": "0.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cc31459afbcd6d80b7220ee54b291a9fd66ff5eb"
        }
      ],
      "purl": "pkg:npm/style-loader@0.18.2",
      "type": "library",
      "bom-ref": "pkg:npm/style-loader@0.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "65a4bb2631e90e02420dba5554c375a4754bb836"
        }
      ],
      "purl": "pkg:npm/supports-color@4.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "svgo",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "9f5772413952135c6fefbf40afe6a4faa88b4bb5"
        }
      ],
      "purl": "pkg:npm/svgo@0.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/svgo@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-precache-webpack-plugin",
      "version": "0.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4b5308eaf64f8afc8b0e9528a6f50a8f9cd9edac"
        }
      ],
      "purl": "pkg:npm/sw-precache-webpack-plugin@0.11.3",
      "type": "library",
      "bom-ref": "pkg:npm/sw-precache-webpack-plugin@0.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-precache",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "eb6225ce580ceaae148194578a0ad01ab7ea199c"
        }
      ],
      "purl": "pkg:npm/sw-precache@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/sw-precache@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-toolbox",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "26df1d1c70348658e4dea2884319149b7b3183b5"
        }
      ],
      "purl": "pkg:npm/sw-toolbox@3.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/sw-toolbox@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4d84964b0966b0087ecc334a2ce002d3d9341e26"
        }
      ],
      "purl": "pkg:npm/test-exclude@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thunky",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bf30146824e2b6e67b0f2d7a4ac8beb26908684e"
        }
      ],
      "purl": "pkg:npm/thunky@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/thunky@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timed-out",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "95860bfcc5c76c277f8f8326fd0f5b2e20eba217"
        }
      ],
      "purl": "pkg:npm/timed-out@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8f38ab9438e17315e5dbd8b3657e8bfb277ae4a7"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.31",
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toposort",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f02cd8a74bd8be2fc0e98611c3bacb95a171869c"
        }
      ],
      "purl": "pkg:npm/toposort@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/toposort@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5887966bb582a4503a41eb524f7d35011815a613"
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "3.0.26",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ba279ca597b13fe6c62c2d87dd5188e57a7a3233"
        }
      ],
      "purl": "pkg:npm/uglify-js@3.0.26",
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.0.26",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniq",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b31c5ae8254844a3a8281541ce2b04b865a734ff"
        }
      ],
      "purl": "pkg:npm/uniq@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/uniq@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniqid",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "89220ddf6b751ae52b5f72484863528596bb84c1"
        }
      ],
      "purl": "pkg:npm/uniqid@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/uniqid@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniqs",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ffede4b36b25290696e6e165d4a59edb998e6b02"
        }
      ],
      "purl": "pkg:npm/uniqs@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/uniqs@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fa71badd4437af4c148841e3b3b165f9e9e590b7"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip-response",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b984f0877fc0a89c2c773cc1ef7b5b232b5b06fe"
        }
      ],
      "purl": "pkg:npm/unzip-response@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/unzip-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8f92c515482bd6831b7c93013e70f87552c7cf5a"
        }
      ],
      "purl": "pkg:npm/update-notifier@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f6b4501c2ec4cdd26ba78be7222961de77621598"
        }
      ],
      "purl": "pkg:npm/upper-case@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urijs",
      "version": "1.18.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b94463eaba59a1a796036a467bb633c667f221ab"
        }
      ],
      "purl": "pkg:npm/urijs@1.18.10",
      "type": "library",
      "bom-ref": "pkg:npm/urijs@1.18.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-loader",
      "version": "0.5.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cc8fea82c7b906e7777019250869e569e995c295"
        }
      ],
      "purl": "pkg:npm/url-loader@0.5.9",
      "type": "library",
      "bom-ref": "pkg:npm/url-loader@0.5.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7af8f303645e9bd79a272e7a14ac68bc0609da73"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d7e8e7d7e309107092b05f8d9688824d633a4226"
        }
      ],
      "purl": "pkg:npm/utila@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8a16a05d445657a3aea5eecc5b12a4fa5379772c"
        }
      ],
      "purl": "pkg:npm/utila@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vendors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "37ad73c8ee417fb3d580e785312307d274847f22"
        }
      ],
      "purl": "pkg:npm/vendors@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/vendors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wbuf",
      "version": "1.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d697b99f1f59512df2751be42769c1580b5801fe"
        }
      ],
      "purl": "pkg:npm/wbuf@1.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/wbuf@1.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-server",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4d36a728b03b8b2afa48ed302428847cea2840ad"
        }
      ],
      "purl": "pkg:npm/webpack-dev-server@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-manifest-plugin",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6b6c718aade8a2537995784b46bd2e9836057caa"
        }
      ],
      "purl": "pkg:npm/webpack-manifest-plugin@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/webpack-manifest-plugin@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "17c62bfaf13c707f9d02c479e0dcdde8380697fb"
        }
      ],
      "purl": "pkg:npm/webpack-sources@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2e0457f0abb1ac5df3ab106c69c672f236785f07"
        }
      ],
      "purl": "pkg:npm/webpack@2.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/webpack@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whet.extend",
      "version": "0.9.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f877d5bf648c97e5aa542fadc16d6a259b9c11a1"
        }
      ],
      "purl": "pkg:npm/whet.extend@0.9.9",
      "type": "library",
      "bom-ref": "pkg:npm/whet.extend@0.9.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "0c09c85c2a94683d0d7eaf8ee097d564bf0e105c"
        }
      ],
      "purl": "pkg:npm/widest-line@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f807a4f0b1d9e913ae7a48112e6cc3af1991b45f"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@1.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "edbc903cc385fc04523d966a335504b5504d1bd2"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-char-classes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "64657848a20ffc5df583a42ad8a277b4512bbc4d"
        }
      ],
      "purl": "pkg:npm/xml-char-classes@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/xml-char-classes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "275ecf0d7ffe05c77e64e7c86e4cd94bf0e1228a"
        }
      ],
      "purl": "pkg:npm/yargs-parser@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6ba318eb16961727f5d284f8ea003e8d6154d0c8"
        }
      ],
      "purl": "pkg:npm/yargs@7.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/yarn.lock"
              }
            ],
            "concludedValue": "demo/yarn.lock"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/core-js@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encoding@0.1.12",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.18"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-fetch@1.7.1",
      "dependsOn": [
        "pkg:npm/encoding@0.1.12",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-fetch@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "dependsOn": [
        "pkg:npm/node-fetch@1.7.1",
        "pkg:npm/whatwg-fetch@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.3.1",
      "dependsOn": [
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asap@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise@7.3.1",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ua-parser-js@0.7.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fbjs@0.8.12",
      "dependsOn": [
        "pkg:npm/core-js@1.2.7",
        "pkg:npm/isomorphic-fetch@2.2.1",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/promise@7.1.1",
        "pkg:npm/promise@7.3.1",
        "pkg:npm/setimmediate@1.0.5",
        "pkg:npm/ua-parser-js@0.7.14"
      ]
    },
    {
      "ref": "pkg:npm/create-react-class@15.6.0",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prop-types@15.5.10",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/loose-envify@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/react@15.6.1",
      "dependsOn": [
        "pkg:npm/create-react-class@15.6.0",
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.5.10"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@15.6.1",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.5.10",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/react-onclickoutside@6.5.0",
      "dependsOn": [
        "pkg:npm/react-dom@15.6.1",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/react@15.0.38",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.22.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/core-js@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-runtime@6.23.0",
      "dependsOn": [
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/regenerator-runtime@0.10.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-messages@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-fast-properties@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-types@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/to-fast-properties@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-finite@1.0.2",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/repeating@2.0.1",
      "dependsOn": [
        "pkg:npm/is-finite@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/detect-indent@4.0.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/trim-right@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-generator@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/detect-indent@4.0.0",
        "pkg:npm/jsesc@1.3.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/trim-right@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/babylon@6.17.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.8",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/globals@9.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invariant@2.2.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-traverse@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/globals@9.18.0",
        "pkg:npm/invariant@2.2.2",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-template@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helpers@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/home-or-tmp@2.0.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.4.15",
      "dependsOn": [
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/babel-register@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/home-or-tmp@2.0.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/source-map-support@0.4.15"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.8",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.7",
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/private@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slash@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-core@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-generator@6.25.0",
        "pkg:npm/babel-helpers@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-register@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/private@0.1.7",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@1.7.4",
      "dependsOn": [
        "pkg:npm/babel-generator@6.25.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/semver@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/arrify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-diff@2.0.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array-unique@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/is-number@2.1.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/randomatic@1.1.7",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@2.2.3",
      "dependsOn": [
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/randomatic@1.1.7",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-range@1.8.2",
      "dependsOn": [
        "pkg:npm/fill-range@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/preserve@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/braces@1.8.5",
      "dependsOn": [
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/repeat-element@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-posix-bracket@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@0.1.5",
      "dependsOn": [
        "pkg:npm/is-posix-bracket@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extglob@0.3.2",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/filename-regex@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.1.1",
      "dependsOn": [
        "pkg:npm/remove-trailing-separator@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@0.1.5",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.omit@2.0.1",
      "dependsOn": [
        "pkg:npm/for-own@0.1.5",
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@2.0.0",
      "dependsOn": [
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-base@0.3.0",
      "dependsOn": [
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-dotfile@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-glob@3.0.4",
      "dependsOn": [
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/is-dotfile@1.0.3",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-primitive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-equal-shallow@0.1.3",
      "dependsOn": [
        "pkg:npm/is-primitive@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regex-cache@0.4.3",
      "dependsOn": [
        "pkg:npm/is-equal-shallow@0.1.3",
        "pkg:npm/is-primitive@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@2.3.11",
      "dependsOn": [
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/filename-regex@2.0.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/object.omit@2.0.1",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/regex-cache@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.1",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-builtin-module@1.0.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-ids@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@1.0.2",
      "dependsOn": [
        "pkg:npm/spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.4.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.5.0",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/validate-npm-package-license@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/require-main-filename@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-exclude@3.3.0",
      "dependsOn": [
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-main-filename@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-istanbul@3.1.2",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/test-exclude@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-jest-hoist@18.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-preset-jest@18.0.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-jest-hoist@18.0.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-jest@18.0.0",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-plugin-istanbul@3.1.2",
        "pkg:npm/babel-preset-jest@18.0.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@4.0.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-dynamic-import@2.0.2",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify@1.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@4.11.8",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@1.5.1",
      "dependsOn": [
        "pkg:npm/ajv@4.11.8"
      ]
    },
    {
      "ref": "pkg:npm/async@2.5.0",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/prr@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errno@0.1.4",
      "dependsOn": [
        "pkg:npm/prr@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.3",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.3",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/memory-fs@0.4.1",
      "dependsOn": [
        "pkg:npm/errno@0.1.4",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/tapable@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@3.4.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/tapable@0.2.7"
      ]
    },
    {
      "ref": "pkg:npm/interpret@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-loader@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/big.js@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emojis-list@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-utils@0.2.17",
      "dependsOn": [
        "pkg:npm/big.js@3.1.3",
        "pkg:npm/emojis-list@2.1.0",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util@0.10.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assert@1.4.1",
      "dependsOn": [
        "pkg:npm/util@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/pako@0.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-zlib@0.1.4",
      "dependsOn": [
        "pkg:npm/pako@0.2.9"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@4.9.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.2.1",
        "pkg:npm/ieee754@1.1.8",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/date-now@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/console-browserify@1.1.0",
      "dependsOn": [
        "pkg:npm/date-now@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/constants-browserify@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-xor@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cipher-base@1.0.4",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/hash-base@2.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ripemd160@2.0.1",
      "dependsOn": [
        "pkg:npm/hash-base@2.0.2",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/sha.js@2.4.8",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/create-hash@1.1.3",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/sha.js@2.4.8"
      ]
    },
    {
      "ref": "pkg:npm/evp_bytestokey@1.0.0",
      "dependsOn": [
        "pkg:npm/create-hash@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/browserify-aes@1.0.6",
      "dependsOn": [
        "pkg:npm/buffer-xor@1.0.3",
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/evp_bytestokey@1.0.0",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-assert@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/des.js@1.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/browserify-des@1.0.0",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/des.js@1.0.0",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/browserify-cipher@1.0.0",
      "dependsOn": [
        "pkg:npm/browserify-aes@1.0.6",
        "pkg:npm/browserify-des@1.0.0",
        "pkg:npm/evp_bytestokey@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bn.js@4.11.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.0.5",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify-rsa@4.0.1",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/create-hmac@1.1.6",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/sha.js@2.4.8"
      ]
    },
    {
      "ref": "pkg:npm/brorand@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hash.js@1.1.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hmac-drbg@1.0.1",
      "dependsOn": [
        "pkg:npm/hash.js@1.1.3",
        "pkg:npm/minimalistic-assert@1.0.0",
        "pkg:npm/minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/elliptic@6.4.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/brorand@1.1.0",
        "pkg:npm/hash.js@1.1.3",
        "pkg:npm/hmac-drbg@1.0.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0",
        "pkg:npm/minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/asn1.js@4.9.1",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pbkdf2@3.0.12",
      "dependsOn": [
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/sha.js@2.4.8"
      ]
    },
    {
      "ref": "pkg:npm/parse-asn1@5.1.0",
      "dependsOn": [
        "pkg:npm/asn1.js@4.9.1",
        "pkg:npm/browserify-aes@1.0.6",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/evp_bytestokey@1.0.0",
        "pkg:npm/pbkdf2@3.0.12"
      ]
    },
    {
      "ref": "pkg:npm/browserify-sign@4.0.4",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/browserify-rsa@4.0.1",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/elliptic@6.4.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/parse-asn1@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/create-ecdh@4.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/elliptic@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/miller-rabin@4.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/brorand@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/diffie-hellman@5.0.2",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/miller-rabin@4.0.0",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/public-encrypt@4.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/browserify-rsa@4.0.1",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/parse-asn1@5.1.0",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/crypto-browserify@3.11.1",
      "dependsOn": [
        "pkg:npm/browserify-cipher@1.0.0",
        "pkg:npm/browserify-sign@4.0.4",
        "pkg:npm/create-ecdh@4.0.0",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/diffie-hellman@5.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/pbkdf2@3.0.12",
        "pkg:npm/public-encrypt@4.0.0",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/domain-browser@1.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/https-browserify@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-browserify@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process@0.11.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring-es3@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-browserify@2.0.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/builtin-status-codes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-arraybuffer@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-http@2.7.2",
      "dependsOn": [
        "pkg:npm/builtin-status-codes@3.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/to-arraybuffer@1.0.1",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-browserify@2.0.2",
      "dependsOn": [
        "pkg:npm/setimmediate@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/tty-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url@0.11.0",
      "dependsOn": [
        "pkg:npm/punycode@1.3.2",
        "pkg:npm/querystring@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/indexof@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vm-browserify@0.0.4",
      "dependsOn": [
        "pkg:npm/indexof@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-libs-browser@2.0.0",
      "dependsOn": [
        "pkg:npm/assert@1.4.1",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/buffer@4.9.1",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/crypto-browserify@3.11.1",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/events@1.1.1",
        "pkg:npm/https-browserify@0.0.1",
        "pkg:npm/os-browserify@0.2.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/timers-browserify@2.0.2",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@3.2.3",
      "dependsOn": [
        "pkg:npm/has-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/align-text@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/lazy-cache@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/center-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4",
        "pkg:npm/lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/right-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@2.1.0",
      "dependsOn": [
        "pkg:npm/center-align@0.1.3",
        "pkg:npm/right-align@0.1.3",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.10.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/window-size@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.8.29",
      "dependsOn": [
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@1.3.0",
      "dependsOn": [
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/micromatch@2.3.11"
      ]
    },
    {
      "ref": "pkg:npm/async-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binary-extensions@1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@1.0.1",
      "dependsOn": [
        "pkg:npm/binary-extensions@1.9.0"
      ]
    },
    {
      "ref": "pkg:npm/set-immediate-shim@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@2.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nan@2.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hoek@2.16.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@2.10.1",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@2.0.5",
      "dependsOn": [
        "pkg:npm/boom@2.10.1"
      ]
    },
    {
      "ref": "pkg:npm/sntp@1.0.9",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/hawk@3.1.3",
      "dependsOn": [
        "pkg:npm/boom@2.10.1",
        "pkg:npm/cryptiles@2.0.5",
        "pkg:npm/hoek@2.16.3",
        "pkg:npm/sntp@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/osenv@0.1.4",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/nopt@4.0.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.0",
        "pkg:npm/osenv@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/delegates@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-shims@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.2.9",
      "dependsOn": [
        "pkg:npm/buffer-shims@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/string_decoder@1.0.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@1.1.4",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@2.2.9",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/console-control-strings@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aproba@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-unicode@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wide-align@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/gauge@2.7.4",
      "dependsOn": [
        "pkg:npm/aproba@1.1.1",
        "pkg:npm/aproba@1.1.2",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wide-align@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npmlog@4.1.0",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.1",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/aws-sign2@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.5",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.27.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.15",
      "dependsOn": [
        "pkg:npm/mime-db@1.27.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.1.4",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/mime-types@2.1.15"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@4.2.1",
      "dependsOn": [
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/har-schema@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.3.6",
      "dependsOn": [
        "pkg:npm/extsprintf@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.0.2",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.3.6"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.1",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jodid25519@1.0.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.13.0",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jodid25519@1.0.2",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.1.1",
      "dependsOn": [
        "pkg:npm/assert-plus@0.2.0",
        "pkg:npm/jsprim@1.4.0",
        "pkg:npm/sshpk@1.13.0",
        "pkg:npm/sshpk@1.13.1"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.3.2",
      "dependsOn": [
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.0.1",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.81.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.6.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.1.4",
        "pkg:npm/har-validator@4.2.1",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/http-signature@1.1.1",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.15",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/performance-now@0.2.0",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/safe-buffer@5.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.2",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.0.1",
        "pkg:npm/uuid@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.7",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.2",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.1",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/block-stream@0.0.9",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/fstream@1.0.11",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/tar@2.2.1",
      "dependsOn": [
        "pkg:npm/block-stream@0.0.9",
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/fstream-ignore@1.0.5",
      "dependsOn": [
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/uid-number@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-pack@3.4.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/fstream-ignore@1.0.5",
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/once@1.4.0",
        "pkg:npm/readable-stream@2.2.9",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/tar@2.2.1",
        "pkg:npm/uid-number@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.6.39",
      "dependsOn": [
        "pkg:npm/detect-libc@1.0.2",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npmlog@4.1.0",
        "pkg:npm/rc@1.2.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/tar-pack@3.4.0",
        "pkg:npm/tar@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.1.3",
      "dependsOn": [
        "pkg:npm/nan@2.7.0",
        "pkg:npm/node-pre-gyp@0.6.39"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@1.7.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.0",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/fsevents@1.1.2",
        "pkg:npm/fsevents@1.1.3",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@1.4.0",
      "dependsOn": [
        "pkg:npm/async@2.5.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-sources@1.0.1",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.0",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@2.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@3.2.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invert-kv@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@1.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@1.4.0",
      "dependsOn": [
        "pkg:npm/lcid@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@4.2.1",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@6.6.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/webpack@2.7.0",
      "dependsOn": [
        "pkg:npm/acorn-dynamic-import@2.0.2",
        "pkg:npm/acorn@5.1.1",
        "pkg:npm/ajv-keywords@1.5.1",
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/async@2.5.0",
        "pkg:npm/enhanced-resolve@3.4.1",
        "pkg:npm/interpret@1.0.3",
        "pkg:npm/json-loader@0.5.7",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/loader-runner@2.3.0",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/node-libs-browser@2.0.0",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/tapable@0.2.7",
        "pkg:npm/uglify-js@2.8.29",
        "pkg:npm/watchpack@1.4.0",
        "pkg:npm/webpack-sources@1.0.1",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-dir@1.0.0",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/find-cache-dir@0.1.1",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-loader@6.4.1",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/webpack@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-remove-strict-mode@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-function-name@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-get-function-arity@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-define-map@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-define-map@6.24.1",
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
        "pkg:npm/babel-helper-replace-supers@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-hoist-variables@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-replace-supers@6.24.1",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-hoist-variables@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-call-delegate@6.24.1",
        "pkg:npm/babel-helper-get-function-arity@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-regex@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-regex@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerate@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsgen@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsesc@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsparser@0.1.5",
      "dependsOn": [
        "pkg:npm/jsesc@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/regexpu-core@2.0.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.3.2",
        "pkg:npm/regjsgen@0.2.0",
        "pkg:npm/regjsparser@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-regex@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/regexpu-core@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-transform@0.9.11",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/private@0.1.7"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
      "dependsOn": [
        "pkg:npm/regenerator-transform@0.9.11"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-es2015@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-builder-react-jsx@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/esutils@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-builder-react-jsx@6.24.1",
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-flow@6.18.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-flow@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-react@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
        "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
        "pkg:npm/babel-preset-flow@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.5.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@1.0.1",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@1.2.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@2.1.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/nth-check@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.4.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.9.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.4.1",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@8.0.51",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse5@3.0.3",
      "dependsOn": [
        "pkg:npm/@types/node@8.0.51"
      ]
    },
    {
      "ref": "pkg:npm/cheerio@1.0.0-rc.2",
      "dependsOn": [
        "pkg:npm/css-select@1.2.0",
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/htmlparser2@3.9.2",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/parse5@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/foreach@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.2",
      "dependsOn": [
        "pkg:npm/foreach@2.0.5",
        "pkg:npm/object-keys@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-callable@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function.prototype.name@1.0.3",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/is-callable@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/is-subset@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-is@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.assign@4.0.4",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/object-keys@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.1.1",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.3",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-symbol@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has@1.0.1",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-regex@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.7.0",
      "dependsOn": [
        "pkg:npm/es-to-primitive@1.1.1",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/is-callable@1.1.3",
        "pkg:npm/is-regex@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/object.entries@1.0.4",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/es-abstract@1.7.0",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object.values@1.0.4",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/es-abstract@1.7.0",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raf@3.4.0",
      "dependsOn": [
        "pkg:npm/performance-now@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nomnom@1.6.2",
      "dependsOn": [
        "pkg:npm/colors@0.5.1",
        "pkg:npm/underscore@1.4.4"
      ]
    },
    {
      "ref": "pkg:npm/railroad-diagrams@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/discontinuous-range@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ret@0.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randexp@0.4.6",
      "dependsOn": [
        "pkg:npm/discontinuous-range@1.0.0",
        "pkg:npm/ret@0.1.15"
      ]
    },
    {
      "ref": "pkg:npm/nearley@2.11.0",
      "dependsOn": [
        "pkg:npm/nomnom@1.6.2",
        "pkg:npm/railroad-diagrams@1.0.0",
        "pkg:npm/randexp@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/rst-selector-parser@2.2.3",
      "dependsOn": [
        "pkg:npm/lodash.flattendeep@4.4.0",
        "pkg:npm/nearley@2.11.0"
      ]
    },
    {
      "ref": "pkg:npm/enzyme@3.1.1",
      "dependsOn": [
        "pkg:npm/cheerio@1.0.0-rc.2",
        "pkg:npm/function.prototype.name@1.0.3",
        "pkg:npm/is-subset@0.1.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/object-is@1.0.1",
        "pkg:npm/object.assign@4.0.4",
        "pkg:npm/object.entries@1.0.4",
        "pkg:npm/object.values@1.0.4",
        "pkg:npm/raf@3.4.0",
        "pkg:npm/rst-selector-parser@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/react-test-renderer@15.6.1",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/enzyme-adapter-utils@1.1.1",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/object.assign@4.0.4",
        "pkg:npm/prop-types@15.5.10",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/enzyme-adapter-react-15@1.0.5",
      "dependsOn": [
        "pkg:npm/enzyme-adapter-utils@1.1.1",
        "pkg:npm/enzyme@3.1.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/object.assign@4.0.4",
        "pkg:npm/object.values@1.0.4",
        "pkg:npm/prop-types@15.5.10",
        "pkg:npm/react-dom@15.6.1",
        "pkg:npm/react-test-renderer@15.6.1",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/doctrine@2.0.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@3.1.1",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@2.0.1",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.24",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.1",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/d@1.0.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.24"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24"
      ]
    },
    {
      "ref": "pkg:npm/es6-set@0.1.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-iterator@2.0.1",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/event-emitter@0.3.5"
      ]
    },
    {
      "ref": "pkg:npm/es6-map@0.1.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-iterator@2.0.1",
        "pkg:npm/es6-set@0.1.5",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/event-emitter@0.3.5"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@2.0.2",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-iterator@2.0.1",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.2.0",
      "dependsOn": [
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/escope@3.6.0",
      "dependsOn": [
        "pkg:npm/es6-map@0.1.5",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/esrecurse@4.2.0",
        "pkg:npm/estraverse@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-jsx@3.0.1",
      "dependsOn": [
        "pkg:npm/acorn@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/espree@3.4.3",
      "dependsOn": [
        "pkg:npm/acorn-jsx@3.0.1",
        "pkg:npm/acorn@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/esquery@1.0.0",
      "dependsOn": [
        "pkg:npm/estraverse@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/circular-json@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/globby@5.0.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-path-cwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-inside@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@1.0.0",
      "dependsOn": [
        "pkg:npm/path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-path-inside@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/del@2.2.2",
      "dependsOn": [
        "pkg:npm/globby@5.0.0",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/write@0.2.1",
      "dependsOn": [
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/flat-cache@1.2.2",
      "dependsOn": [
        "pkg:npm/circular-json@0.3.3",
        "pkg:npm/del@2.2.2",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/write@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/file-entry-cache@2.0.0",
      "dependsOn": [
        "pkg:npm/flat-cache@1.2.2",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ignore@3.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exit-hook@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/restore-cursor@1.0.1",
      "dependsOn": [
        "pkg:npm/exit-hook@1.1.1",
        "pkg:npm/onetime@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@1.0.2",
      "dependsOn": [
        "pkg:npm/restore-cursor@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cli-width@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/figures@1.7.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readline2@1.0.1",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/mute-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/run-async@0.1.0",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/rx-lite@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@0.12.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-cursor@1.0.2",
        "pkg:npm/cli-width@2.1.0",
        "pkg:npm/figures@1.7.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/readline2@1.0.1",
        "pkg:npm/run-async@0.1.0",
        "pkg:npm/rx-lite@3.1.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/generate-function@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-property@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/generate-object-property@1.2.0",
      "dependsOn": [
        "pkg:npm/is-property@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/jsonpointer@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-my-json-valid@2.16.0",
      "dependsOn": [
        "pkg:npm/generate-function@2.0.0",
        "pkg:npm/generate-object-property@1.2.0",
        "pkg:npm/jsonpointer@4.0.1",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/tryit@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-resolvable@1.0.0",
      "dependsOn": [
        "pkg:npm/tryit@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.9",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.9.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/esprima@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/prelude-ls@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.3.2",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.3.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.2"
      ]
    },
    {
      "ref": "pkg:npm/natural-compare@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.8.2",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.3.0",
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.2",
        "pkg:npm/wordwrap@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pluralize@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caller-path@0.1.0",
      "dependsOn": [
        "pkg:npm/callsites@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-uncached@1.0.3",
      "dependsOn": [
        "pkg:npm/caller-path@0.1.0",
        "pkg:npm/resolve-from@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.3.3",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/rechoir@0.6.2",
      "dependsOn": [
        "pkg:npm/resolve@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.7.8",
      "dependsOn": [
        "pkg:npm/glob@7.1.2",
        "pkg:npm/interpret@1.0.3",
        "pkg:npm/rechoir@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@2.1.1",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/table@3.8.3",
      "dependsOn": [
        "pkg:npm/ajv-keywords@1.5.1",
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/slice-ansi@0.0.4",
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/user-home@2.0.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/eslint@3.19.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/concat-stream@1.6.0",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/doctrine@2.0.0",
        "pkg:npm/escope@3.6.0",
        "pkg:npm/espree@3.4.3",
        "pkg:npm/esquery@1.0.0",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/file-entry-cache@2.0.0",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/globals@9.18.0",
        "pkg:npm/ignore@3.3.3",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/inquirer@0.12.0",
        "pkg:npm/is-my-json-valid@2.16.0",
        "pkg:npm/is-resolvable@1.0.0",
        "pkg:npm/js-yaml@3.9.0",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/levn@0.3.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/optionator@0.8.2",
        "pkg:npm/path-is-inside@1.0.2",
        "pkg:npm/pluralize@1.2.1",
        "pkg:npm/progress@1.1.8",
        "pkg:npm/require-uncached@1.0.3",
        "pkg:npm/shelljs@0.7.8",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/table@3.8.3",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/user-home@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deprecated@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-differ@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/beeper@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/time-stamp@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fancy-log@1.3.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/time-stamp@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/sparkles@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glogg@1.0.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulplog@1.0.0",
      "dependsOn": [
        "pkg:npm/glogg@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-gulplog@0.1.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reescape@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecopy@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basetostring@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basevalues@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._root@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.escape@3.2.0",
      "dependsOn": [
        "pkg:npm/lodash._root@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._getnative@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarguments@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarray@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@3.1.2",
      "dependsOn": [
        "pkg:npm/lodash._getnative@3.9.1",
        "pkg:npm/lodash.isarguments@3.1.0",
        "pkg:npm/lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash.restparam@3.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@3.6.2",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.1",
        "pkg:npm/lodash._basetostring@3.0.1",
        "pkg:npm/lodash._basevalues@3.0.0",
        "pkg:npm/lodash._isiterateecall@3.0.9",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0",
        "pkg:npm/lodash.keys@3.1.2",
        "pkg:npm/lodash.restparam@3.6.1",
        "pkg:npm/lodash.templatesettings@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/duplexer2@0.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/multipipe@0.1.2",
      "dependsOn": [
        "pkg:npm/duplexer2@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/replace-ext@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@2.0.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.5.3",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@1.0.2",
        "pkg:npm/replace-ext@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-util@3.0.8",
      "dependsOn": [
        "pkg:npm/array-differ@1.0.0",
        "pkg:npm/array-uniq@1.0.3",
        "pkg:npm/beeper@1.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/dateformat@2.0.0",
        "pkg:npm/fancy-log@1.3.0",
        "pkg:npm/gulplog@1.0.0",
        "pkg:npm/has-gulplog@0.1.0",
        "pkg:npm/lodash._reescape@3.0.0",
        "pkg:npm/lodash._reevaluate@3.0.0",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.template@3.6.2",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/multipipe@0.1.2",
        "pkg:npm/object-assign@3.0.0",
        "pkg:npm/replace-ext@0.0.1",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/fs-exists-sync@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-file@0.1.0",
      "dependsOn": [
        "pkg:npm/fs-exists-sync@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/expand-tilde@1.2.2",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-passwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/homedir-polyfill@1.0.1",
      "dependsOn": [
        "pkg:npm/parse-passwd@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.2.14",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/global-prefix@0.1.5",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/is-windows@0.2.0",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@0.2.3",
      "dependsOn": [
        "pkg:npm/global-prefix@0.1.5",
        "pkg:npm/is-windows@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-dir@0.1.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@1.2.2",
        "pkg:npm/global-modules@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.4.3",
      "dependsOn": [
        "pkg:npm/detect-file@0.1.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/resolve-dir@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-tilde@2.0.2",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-slice@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@1.0.0",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.defaults@1.1.0",
      "dependsOn": [
        "pkg:npm/array-each@1.0.1",
        "pkg:npm/array-slice@1.0.0",
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object.pick@1.2.0",
      "dependsOn": [
        "pkg:npm/isobject@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unc-path-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unc-path@0.1.2",
      "dependsOn": [
        "pkg:npm/unc-path-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-relative@0.2.1",
      "dependsOn": [
        "pkg:npm/is-unc-path@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute@0.2.6",
      "dependsOn": [
        "pkg:npm/is-relative@0.2.1",
        "pkg:npm/is-windows@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/map-cache@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-root-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-root@0.1.1",
      "dependsOn": [
        "pkg:npm/path-root-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-filepath@1.0.1",
      "dependsOn": [
        "pkg:npm/is-absolute@0.2.6",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/path-root@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fined@1.1.0",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.defaults@1.1.0",
        "pkg:npm/object.pick@1.2.0",
        "pkg:npm/parse-filepath@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isstring@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.mapvalues@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/liftoff@2.3.0",
      "dependsOn": [
        "pkg:npm/extend@3.0.1",
        "pkg:npm/findup-sync@0.4.3",
        "pkg:npm/fined@1.1.0",
        "pkg:npm/flagged-respawn@0.3.2",
        "pkg:npm/lodash.isplainobject@4.0.6",
        "pkg:npm/lodash.isstring@4.0.1",
        "pkg:npm/lodash.mapvalues@4.6.0",
        "pkg:npm/rechoir@0.6.2",
        "pkg:npm/resolve@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/once@1.3.3",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@0.1.5",
      "dependsOn": [
        "pkg:npm/once@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/sequencify@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-consume@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/orchestrator@0.3.8",
      "dependsOn": [
        "pkg:npm/end-of-stream@0.1.5",
        "pkg:npm/sequencify@0.0.7",
        "pkg:npm/stream-consume@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-hrtime@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tildify@1.2.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8flags@2.1.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/defaults@1.0.3",
      "dependsOn": [
        "pkg:npm/clone@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.10",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/find-index@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob2base@0.0.12",
      "dependsOn": [
        "pkg:npm/find-index@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.6.5",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/unique-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-stream@3.1.18",
      "dependsOn": [
        "pkg:npm/glob2base@0.0.12",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/ordered-read-streams@0.1.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/unique-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.1.21",
      "dependsOn": [
        "pkg:npm/graceful-fs@1.2.3",
        "pkg:npm/inherits@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globule@0.1.0",
      "dependsOn": [
        "pkg:npm/glob@3.1.21",
        "pkg:npm/lodash@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.5.2",
      "dependsOn": [
        "pkg:npm/globule@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@0.0.6",
      "dependsOn": [
        "pkg:npm/gaze@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/natives@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@3.0.11",
      "dependsOn": [
        "pkg:npm/natives@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.4.6",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@0.3.14",
      "dependsOn": [
        "pkg:npm/defaults@1.0.3",
        "pkg:npm/glob-stream@3.1.18",
        "pkg:npm/glob-watcher@0.0.6",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp@3.9.1",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/deprecated@0.0.1",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/interpret@1.0.3",
        "pkg:npm/liftoff@2.3.0",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/orchestrator@0.3.8",
        "pkg:npm/pretty-hrtime@1.0.3",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/tildify@1.2.0",
        "pkg:npm/v8flags@2.1.1",
        "pkg:npm/vinyl-fs@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "dependsOn": [
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp-babel@6.1.2",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/replace-ext@0.0.1",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl-sourcemaps-apply@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/streamqueue@0.0.6",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/gulp-insert@0.4.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/streamqueue@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp-plumber@1.1.0",
      "dependsOn": [
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/gulp-rename@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/atob@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-url@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-url@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urix@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.3.1",
      "dependsOn": [
        "pkg:npm/atob@1.1.3",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.3.0",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/css@2.2.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/source-map-resolve@0.3.1",
        "pkg:npm/source-map@0.1.43",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@gulp-sourcemaps/identity-map@1.0.1",
      "dependsOn": [
        "pkg:npm/acorn@5.1.1",
        "pkg:npm/css@2.2.1",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@gulp-sourcemaps/map-sources@1.0.0",
      "dependsOn": [
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ms@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.3.0",
      "dependsOn": [
        "pkg:npm/ms@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/is-promise@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-queue@0.1.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.24"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-ext@0.1.2",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/next-tick@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/memoizee@0.4.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/event-emitter@0.3.5",
        "pkg:npm/is-promise@2.1.0",
        "pkg:npm/lru-queue@0.1.0",
        "pkg:npm/next-tick@1.0.0",
        "pkg:npm/timers-ext@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug-fabulous@0.1.1",
      "dependsOn": [
        "pkg:npm/debug@2.3.0",
        "pkg:npm/memoizee@0.4.5",
        "pkg:npm/object-assign@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/detect-newline@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom-string@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@1.2.0",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@1.0.2",
        "pkg:npm/replace-ext@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-sourcemaps@2.6.0",
      "dependsOn": [
        "pkg:npm/@gulp-sourcemaps/identity-map@1.0.1",
        "pkg:npm/@gulp-sourcemaps/map-sources@1.0.0",
        "pkg:npm/acorn@4.0.13",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/css@2.2.1",
        "pkg:npm/debug-fabulous@0.1.1",
        "pkg:npm/detect-newline@2.1.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/strip-bom-string@1.0.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/deap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.6.4",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-save-license@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gulp-uglify@1.5.4",
      "dependsOn": [
        "pkg:npm/deap@1.0.0",
        "pkg:npm/fancy-log@1.3.0",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/uglify-js@2.6.4",
        "pkg:npm/uglify-save-license@0.4.1",
        "pkg:npm/vinyl-sourcemaps-apply@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/callsites@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ci-info@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-ci@1.0.10",
      "dependsOn": [
        "pkg:npm/ci-info@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fileset@2.0.3",
      "dependsOn": [
        "pkg:npm/glob@7.1.2",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/default-require-extensions@1.0.0",
      "dependsOn": [
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/append-transform@0.4.0",
      "dependsOn": [
        "pkg:npm/default-require-extensions@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-hook@1.0.7",
      "dependsOn": [
        "pkg:npm/append-transform@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@1.1.1",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/path-parse@1.0.5",
        "pkg:npm/supports-color@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@1.2.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/async@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/wordwrap@0.0.2",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.4.4",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@4.0.10",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/source-map@0.4.4",
        "pkg:npm/uglify-js@2.6.4",
        "pkg:npm/uglify-js@2.8.29"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-reports@1.1.1",
      "dependsOn": [
        "pkg:npm/handlebars@4.0.10"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-api@1.1.11",
      "dependsOn": [
        "pkg:npm/async@2.5.0",
        "pkg:npm/fileset@2.0.3",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-hook@1.0.7",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/istanbul-lib-report@1.1.1",
        "pkg:npm/istanbul-lib-source-maps@1.2.1",
        "pkg:npm/istanbul-reports@1.1.1",
        "pkg:npm/js-yaml@3.9.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-changed-files@17.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-mock@18.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-file-exists@17.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-util@18.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/diff@3.3.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/abab@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-globals@3.1.0",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/array-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type-parser@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssom@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssstyle@0.2.37",
      "dependsOn": [
        "pkg:npm/cssom@0.3.2"
      ]
    },
    {
      "ref": "pkg:npm/esprima@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@1.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.2.0",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/escodegen@1.8.1",
      "dependsOn": [
        "pkg:npm/esprima@2.7.3",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/optionator@0.8.2",
        "pkg:npm/source-map@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-encoding@1.0.1",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.13"
      ]
    },
    {
      "ref": "pkg:npm/html-encoding-sniffer@1.0.1",
      "dependsOn": [
        "pkg:npm/whatwg-encoding@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nwmatcher@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse5@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sshpk@1.13.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/symbol-tree@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tr46@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@4.8.0",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/webidl-conversions@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xml-name-validator@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdom@9.12.0",
      "dependsOn": [
        "pkg:npm/abab@1.0.3",
        "pkg:npm/acorn-globals@3.1.0",
        "pkg:npm/acorn@4.0.13",
        "pkg:npm/array-equal@1.0.0",
        "pkg:npm/content-type-parser@1.0.1",
        "pkg:npm/cssom@0.3.2",
        "pkg:npm/cssstyle@0.2.37",
        "pkg:npm/escodegen@1.8.1",
        "pkg:npm/html-encoding-sniffer@1.0.1",
        "pkg:npm/nwmatcher@1.4.1",
        "pkg:npm/parse5@1.5.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/symbol-tree@3.2.2",
        "pkg:npm/tough-cookie@2.3.2",
        "pkg:npm/webidl-conversions@4.0.1",
        "pkg:npm/whatwg-encoding@1.0.1",
        "pkg:npm/whatwg-url@4.8.0",
        "pkg:npm/xml-name-validator@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-jsdom@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/jsdom@9.12.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-node@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/jest-util@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-format@18.1.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-matcher-utils@18.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/pretty-format@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-diff@18.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/diff@3.3.0",
        "pkg:npm/jest-matcher-utils@18.1.0",
        "pkg:npm/pretty-format@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-matchers@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-diff@18.1.0",
        "pkg:npm/jest-matcher-utils@18.1.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/pretty-format@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-snapshot@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-diff@18.1.0",
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-matcher-utils@18.1.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/pretty-format@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-jasmine2@18.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-matcher-utils@18.1.0",
        "pkg:npm/jest-matchers@18.1.0",
        "pkg:npm/jest-snapshot@18.1.0",
        "pkg:npm/jest-util@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-resolve@1.11.2",
      "dependsOn": [
        "pkg:npm/resolve@1.1.7"
      ]
    },
    {
      "ref": "pkg:npm/node-int64@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bser@1.0.2",
      "dependsOn": [
        "pkg:npm/node-int64@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/fb-watchman@1.9.2",
      "dependsOn": [
        "pkg:npm/bser@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/merge@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exec-sh@0.2.0",
      "dependsOn": [
        "pkg:npm/merge@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/tmpl@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/makeerror@1.0.11",
      "dependsOn": [
        "pkg:npm/tmpl@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/walker@1.0.7",
      "dependsOn": [
        "pkg:npm/makeerror@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/watch@0.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sane@1.4.1",
      "dependsOn": [
        "pkg:npm/exec-sh@0.2.0",
        "pkg:npm/fb-watchman@1.9.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/walker@1.0.7",
        "pkg:npm/watch@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/worker-farm@1.4.1",
      "dependsOn": [
        "pkg:npm/errno@0.1.4",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-haste-map@18.1.0",
      "dependsOn": [
        "pkg:npm/fb-watchman@1.9.2",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/sane@1.4.1",
        "pkg:npm/worker-farm@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve@18.1.0",
      "dependsOn": [
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-haste-map@18.1.0",
        "pkg:npm/resolve@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-config@18.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/jest-environment-jsdom@18.1.0",
        "pkg:npm/jest-environment-node@18.1.0",
        "pkg:npm/jest-jasmine2@18.1.0",
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/jest-resolve@18.1.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve-dependencies@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-resolve@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-runtime@18.1.0",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-jest@18.0.0",
        "pkg:npm/babel-plugin-istanbul@3.1.2",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-config@18.1.0",
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-haste-map@18.1.0",
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/jest-resolve@18.1.0",
        "pkg:npm/jest-snapshot@18.1.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/marked@0.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansicolors@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/redeyed@1.0.1",
      "dependsOn": [
        "pkg:npm/esprima@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cardinal@1.0.0",
      "dependsOn": [
        "pkg:npm/ansicolors@0.2.1",
        "pkg:npm/redeyed@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-table@0.3.1",
      "dependsOn": [
        "pkg:npm/colors@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash.assign@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.toarray@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-emoji@1.8.1",
      "dependsOn": [
        "pkg:npm/lodash.toarray@4.4.0"
      ]
    },
    {
      "ref": "pkg:npm/marked-terminal@1.7.0",
      "dependsOn": [
        "pkg:npm/cardinal@1.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-table@0.3.1",
        "pkg:npm/lodash.assign@4.2.0",
        "pkg:npm/marked@0.3.6",
        "pkg:npm/node-emoji@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/cli-usage@0.1.4",
      "dependsOn": [
        "pkg:npm/marked-terminal@1.7.0",
        "pkg:npm/marked@0.3.6"
      ]
    },
    {
      "ref": "pkg:npm/growly@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._arraycopy@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._arrayeach@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._baseassign@3.2.0",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.1",
        "pkg:npm/lodash.keys@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basefor@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._baseclone@3.3.0",
      "dependsOn": [
        "pkg:npm/lodash._arraycopy@3.0.0",
        "pkg:npm/lodash._arrayeach@3.0.0",
        "pkg:npm/lodash._baseassign@3.2.0",
        "pkg:npm/lodash._basefor@3.0.3",
        "pkg:npm/lodash.isarray@3.0.4",
        "pkg:npm/lodash.keys@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lodash._bindcallback@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.clonedeep@3.0.2",
      "dependsOn": [
        "pkg:npm/lodash._baseclone@3.3.0",
        "pkg:npm/lodash._bindcallback@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/shellwords@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-notifier@4.6.1",
      "dependsOn": [
        "pkg:npm/cli-usage@0.1.4",
        "pkg:npm/growly@1.3.0",
        "pkg:npm/lodash.clonedeep@3.0.2",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/shellwords@0.1.0",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/throat@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-cli@18.1.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/callsites@2.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/is-ci@1.0.10",
        "pkg:npm/istanbul-api@1.1.11",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/jest-changed-files@17.0.2",
        "pkg:npm/jest-config@18.1.0",
        "pkg:npm/jest-environment-jsdom@18.1.0",
        "pkg:npm/jest-file-exists@17.0.0",
        "pkg:npm/jest-haste-map@18.1.0",
        "pkg:npm/jest-jasmine2@18.1.0",
        "pkg:npm/jest-mock@18.0.0",
        "pkg:npm/jest-resolve-dependencies@18.1.0",
        "pkg:npm/jest-resolve@18.1.0",
        "pkg:npm/jest-runtime@18.1.0",
        "pkg:npm/jest-snapshot@18.1.0",
        "pkg:npm/jest-util@18.1.0",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/node-notifier@4.6.1",
        "pkg:npm/sane@1.4.1",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/throat@3.2.0",
        "pkg:npm/which@1.2.14",
        "pkg:npm/worker-farm@1.4.1",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/jest@18.1.0",
      "dependsOn": [
        "pkg:npm/jest-cli@18.1.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@2.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-globals@1.0.9",
      "dependsOn": [
        "pkg:npm/acorn@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/webidl-conversions@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url-compat@0.6.5",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jsdom@7.2.2",
      "dependsOn": [
        "pkg:npm/abab@1.0.3",
        "pkg:npm/acorn-globals@1.0.9",
        "pkg:npm/acorn@2.7.0",
        "pkg:npm/cssom@0.3.2",
        "pkg:npm/cssstyle@0.2.37",
        "pkg:npm/escodegen@1.8.1",
        "pkg:npm/nwmatcher@1.4.1",
        "pkg:npm/parse5@1.5.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/symbol-tree@3.2.2",
        "pkg:npm/tough-cookie@2.3.2",
        "pkg:npm/webidl-conversions@2.0.1",
        "pkg:npm/whatwg-url-compat@0.6.5",
        "pkg:npm/xml-name-validator@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-readlink@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.9.0",
      "dependsOn": [
        "pkg:npm/graceful-readlink@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.0",
      "dependsOn": [
        "pkg:npm/ms@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.1",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecreate@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.create@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._baseassign@3.2.0",
        "pkg:npm/lodash._basecreate@3.0.3",
        "pkg:npm/lodash._isiterateecall@3.0.9"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@3.1.2",
      "dependsOn": [
        "pkg:npm/has-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@3.4.2",
      "dependsOn": [
        "pkg:npm/browser-stdout@1.3.0",
        "pkg:npm/commander@2.9.0",
        "pkg:npm/debug@2.6.0",
        "pkg:npm/diff@3.2.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/glob@7.1.1",
        "pkg:npm/growl@1.9.2",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/lodash.create@3.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/supports-color@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/moment@2.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/moment-timezone@0.5.21",
      "dependsOn": [
        "pkg:npm/moment@2.18.1"
      ]
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@4.1.1",
      "dependsOn": [
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/yallist@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@5.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.1",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/os-shim@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spawn-sync@1.0.15",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.0",
        "pkg:npm/os-shim@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/pre-commit@1.2.2",
      "dependsOn": [
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/spawn-sync@1.0.15",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/react-addons-test-utils@15.6.0",
      "dependsOn": [
        "pkg:npm/react-dom@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/typescript@2.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/negotiator@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.3",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.15",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/bytes@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compressible@2.0.10",
      "dependsOn": [
        "pkg:npm/mime-db@1.27.0",
        "pkg:npm/mime-db@1.29.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.7.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/bytes@2.5.0",
        "pkg:npm/compressible@2.0.10",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/vary@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.7",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/parseurl@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.0.3",
      "dependsOn": [
        "pkg:npm/debug@2.6.7",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.1",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@1.1.4",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.0",
        "pkg:npm/ipaddr.js@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.1",
      "dependsOn": [
        "pkg:npm/depd@1.1.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.15.3",
      "dependsOn": [
        "pkg:npm/debug@2.6.7",
        "pkg:npm/depd@1.1.0",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.0",
        "pkg:npm/fresh@0.5.0",
        "pkg:npm/http-errors@1.6.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.12.3",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.1",
        "pkg:npm/send@0.15.3"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.15",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.15"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.15.3",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/content-disposition@0.5.2",
        "pkg:npm/content-type@1.0.2",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.6.7",
        "pkg:npm/depd@1.1.0",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.0",
        "pkg:npm/finalhandler@1.0.3",
        "pkg:npm/fresh@0.5.0",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.1",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@1.1.4",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/send@0.15.3",
        "pkg:npm/serve-static@1.12.3",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vary@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.16.2",
      "dependsOn": [
        "pkg:npm/eventemitter3@1.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy-middleware@0.17.4",
      "dependsOn": [
        "pkg:npm/http-proxy@1.16.2",
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/micromatch@2.3.11"
      ]
    },
    {
      "ref": "pkg:npm/open@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/batch@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.9.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/batch@0.6.1",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.6.1",
        "pkg:npm/mime-types@2.1.15",
        "pkg:npm/parseurl@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.6.5",
      "dependsOn": [
        "pkg:npm/websocket-extensions@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.10.0",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/uuid@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sockjs@0.3.18",
      "dependsOn": [
        "pkg:npm/faye-websocket@0.10.0",
        "pkg:npm/uuid@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/querystringify@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.0.5",
      "dependsOn": [
        "pkg:npm/querystringify@0.0.4",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/original@1.0.0",
      "dependsOn": [
        "pkg:npm/url-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/eventsource@0.1.6",
      "dependsOn": [
        "pkg:npm/original@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.11.1",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/querystringify@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.1.9",
      "dependsOn": [
        "pkg:npm/querystringify@1.0.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sockjs-client@1.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/eventsource@0.1.6",
        "pkg:npm/faye-websocket@0.11.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/url-parse@1.1.9"
      ]
    },
    {
      "ref": "pkg:npm/stream-cache@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-dev-middleware@1.11.0",
      "dependsOn": [
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/mime@1.3.6",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/webpack@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-server@1.16.5",
      "dependsOn": [
        "pkg:npm/compression@1.7.0",
        "pkg:npm/connect-history-api-fallback@1.3.0",
        "pkg:npm/express@4.15.3",
        "pkg:npm/http-proxy-middleware@0.17.4",
        "pkg:npm/open@0.0.5",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/serve-index@1.9.0",
        "pkg:npm/sockjs-client@1.1.4",
        "pkg:npm/sockjs@0.3.18",
        "pkg:npm/stream-cache@0.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/webpack-dev-middleware@1.11.0",
        "pkg:npm/webpack@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.clone@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.some@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/memory-fs@0.3.0",
      "dependsOn": [
        "pkg:npm/errno@0.1.4",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/memory-fs@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@0.1.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@0.9.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/memory-fs@0.2.0",
        "pkg:npm/tapable@0.1.10"
      ]
    },
    {
      "ref": "pkg:npm/interpret@0.6.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-aes@0.4.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/pbkdf2-compat@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ripemd160@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sha.js@2.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/crypto-browserify@3.3.0",
      "dependsOn": [
        "pkg:npm/browserify-aes@0.4.0",
        "pkg:npm/pbkdf2-compat@2.0.1",
        "pkg:npm/ripemd160@0.2.0",
        "pkg:npm/sha.js@2.2.6"
      ]
    },
    {
      "ref": "pkg:npm/node-libs-browser@0.7.0",
      "dependsOn": [
        "pkg:npm/assert@1.4.1",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/buffer@4.9.1",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/crypto-browserify@3.3.0",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/events@1.1.1",
        "pkg:npm/https-browserify@0.0.1",
        "pkg:npm/os-browserify@0.2.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/timers-browserify@2.0.2",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.7.5",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/watchpack@0.2.9",
      "dependsOn": [
        "pkg:npm/async@0.9.2",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-core@0.6.9",
      "dependsOn": [
        "pkg:npm/source-list-map@0.1.8",
        "pkg:npm/source-map@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/webpack@1.15.0",
      "dependsOn": [
        "pkg:npm/acorn@3.3.0",
        "pkg:npm/async@1.5.2",
        "pkg:npm/clone@1.0.2",
        "pkg:npm/enhanced-resolve@0.9.1",
        "pkg:npm/interpret@0.6.6",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/memory-fs@0.3.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/node-libs-browser@0.7.0",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/tapable@0.1.10",
        "pkg:npm/uglify-js@2.7.5",
        "pkg:npm/watchpack@0.2.9",
        "pkg:npm/webpack-core@0.6.9"
      ]
    },
    {
      "ref": "pkg:npm/webpack-stream@3.2.0",
      "dependsOn": [
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/lodash.clone@4.5.0",
        "pkg:npm/lodash.some@4.6.0",
        "pkg:npm/memory-fs@0.3.0",
        "pkg:npm/through@2.3.8",
        "pkg:npm/vinyl@1.2.0",
        "pkg:npm/webpack@1.15.0"
      ]
    },
    {
      "ref": "pkg:npm/react-datetime@2.16.3",
      "dependsOn": [
        "pkg:npm/@types/react@15.0.38",
        "pkg:npm/abab@1.0.3",
        "pkg:npm/abbrev@1.1.0",
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/acorn-dynamic-import@2.0.2",
        "pkg:npm/acorn-globals@3.1.0",
        "pkg:npm/acorn-jsx@3.0.1",
        "pkg:npm/acorn@3.3.0",
        "pkg:npm/acorn@4.0.13",
        "pkg:npm/acorn@5.1.1",
        "pkg:npm/address@1.0.2",
        "pkg:npm/ajv-keywords@1.5.1",
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/ajv@5.2.2",
        "pkg:npm/align-text@0.1.4",
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/amdefine@1.0.1",
        "pkg:npm/anser@1.2.5",
        "pkg:npm/anser@1.4.1",
        "pkg:npm/ansi-align@1.1.0",
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/ansi-escapes@2.0.0",
        "pkg:npm/ansi-html@0.0.7",
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/ansi-regex@3.0.0",
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/ansi-styles@3.2.0",
        "pkg:npm/anymatch@1.3.0",
        "pkg:npm/append-transform@0.4.0",
        "pkg:npm/aproba@1.1.2",
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/aria-query@0.5.0",
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-equal@1.0.0",
        "pkg:npm/array-filter@0.0.1",
        "pkg:npm/array-find-index@1.0.2",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/array-flatten@2.1.1",
        "pkg:npm/array-includes@3.0.3",
        "pkg:npm/array-map@0.0.0",
        "pkg:npm/array-reduce@0.0.0",
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/array-uniq@1.0.3",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/asap@2.0.6",
        "pkg:npm/asn1.js@4.9.1",
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@0.2.0",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/assert@1.4.1",
        "pkg:npm/ast-types-flow@0.0.7",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/async@1.5.2",
        "pkg:npm/async@2.1.4",
        "pkg:npm/async@2.5.0",
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/autoprefixer@6.7.7",
        "pkg:npm/autoprefixer@7.1.1",
        "pkg:npm/aws-sign2@0.6.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/axobject-query@0.1.0",
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-eslint@7.2.3",
        "pkg:npm/babel-generator@6.25.0",
        "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
        "pkg:npm/babel-helper-builder-react-jsx@6.24.1",
        "pkg:npm/babel-helper-call-delegate@6.24.1",
        "pkg:npm/babel-helper-define-map@6.24.1",
        "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-helper-get-function-arity@6.24.1",
        "pkg:npm/babel-helper-hoist-variables@6.24.1",
        "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
        "pkg:npm/babel-helper-regex@6.24.1",
        "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
        "pkg:npm/babel-helper-replace-supers@6.24.1",
        "pkg:npm/babel-helpers@6.24.1",
        "pkg:npm/babel-jest@18.0.0",
        "pkg:npm/babel-jest@20.0.3",
        "pkg:npm/babel-loader@6.4.1",
        "pkg:npm/babel-loader@7.0.0",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
        "pkg:npm/babel-plugin-dynamic-import-node@1.0.2",
        "pkg:npm/babel-plugin-istanbul@4.1.4",
        "pkg:npm/babel-plugin-jest-hoist@20.0.3",
        "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
        "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
        "pkg:npm/babel-plugin-syntax-flow@6.18.0",
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
        "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
        "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
        "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
        "pkg:npm/babel-plugin-transform-object-rest-spread@6.23.0",
        "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
        "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
        "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
        "pkg:npm/babel-plugin-transform-remove-strict-mode@0.0.2",
        "pkg:npm/babel-plugin-transform-runtime@6.23.0",
        "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
        "pkg:npm/babel-preset-env@1.5.2",
        "pkg:npm/babel-preset-es2015@6.24.1",
        "pkg:npm/babel-preset-flow@6.23.0",
        "pkg:npm/babel-preset-jest@20.0.3",
        "pkg:npm/babel-preset-react-app@3.0.1",
        "pkg:npm/babel-preset-react@6.24.1",
        "pkg:npm/babel-register@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4",
        "pkg:npm/balanced-match@0.4.2",
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/base64-js@1.2.1",
        "pkg:npm/base64url@2.0.0",
        "pkg:npm/batch@0.6.1",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/big.js@3.1.3",
        "pkg:npm/binary-extensions@1.9.0",
        "pkg:npm/block-stream@0.0.9",
        "pkg:npm/bluebird@3.5.0",
        "pkg:npm/bn.js@4.11.7",
        "pkg:npm/bonjour@3.5.0",
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/boom@2.10.1",
        "pkg:npm/boxen@0.6.0",
        "pkg:npm/brace-expansion@1.1.8",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/brorand@1.1.0",
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/browserify-aes@1.0.6",
        "pkg:npm/browserify-cipher@1.0.0",
        "pkg:npm/browserify-des@1.0.0",
        "pkg:npm/browserify-rsa@4.0.1",
        "pkg:npm/browserify-sign@4.0.4",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/browserslist@2.2.2",
        "pkg:npm/bser@1.0.2",
        "pkg:npm/bser@2.0.0",
        "pkg:npm/buffer-indexof@1.1.0",
        "pkg:npm/buffer-xor@1.0.3",
        "pkg:npm/buffer@4.9.1",
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/builtin-status-codes@3.0.0",
        "pkg:npm/bytes@2.5.0",
        "pkg:npm/caller-path@0.1.0",
        "pkg:npm/callsites@0.2.0",
        "pkg:npm/callsites@2.0.0",
        "pkg:npm/camel-case@3.0.0",
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/caniuse-api@1.6.1",
        "pkg:npm/caniuse-db@1.0.30000704",
        "pkg:npm/caniuse-lite@1.0.30000704",
        "pkg:npm/capture-stack-trace@1.0.0",
        "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/center-align@0.1.3",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/chalk@2.0.1",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/ci-info@1.0.0",
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/circular-json@0.3.3",
        "pkg:npm/clap@1.2.0",
        "pkg:npm/clean-css@4.1.7",
        "pkg:npm/cli-boxes@1.0.0",
        "pkg:npm/cli-cursor@1.0.2",
        "pkg:npm/cli-cursor@2.1.0",
        "pkg:npm/cli-width@2.1.0",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/clone@1.0.2",
        "pkg:npm/co@4.6.0",
        "pkg:npm/coa@1.0.4",
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/color-convert@1.9.0",
        "pkg:npm/color-name@1.1.3",
        "pkg:npm/color-string@0.3.0",
        "pkg:npm/color@0.11.4",
        "pkg:npm/colormin@1.1.2",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/commander@2.11.0",
        "pkg:npm/commander@2.9.0",
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/compressible@2.0.10",
        "pkg:npm/compression@1.7.0",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/concat-stream@1.6.0",
        "pkg:npm/configstore@2.1.0",
        "pkg:npm/connect-history-api-fallback@1.3.0",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/contains-path@0.1.0",
        "pkg:npm/content-disposition@0.5.2",
        "pkg:npm/content-type-parser@1.0.1",
        "pkg:npm/content-type@1.0.2",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/core-js@1.2.7",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/create-ecdh@4.0.0",
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/create-react-class@15.6.0",
        "pkg:npm/cross-spawn@4.0.2",
        "pkg:npm/cryptiles@2.0.5",
        "pkg:npm/crypto-browserify@3.11.1",
        "pkg:npm/css-color-names@0.0.4",
        "pkg:npm/css-loader@0.28.4",
        "pkg:npm/css-select@1.2.0",
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/css-what@2.1.0",
        "pkg:npm/cssesc@0.1.0",
        "pkg:npm/cssnano@3.10.0",
        "pkg:npm/csso@2.3.2",
        "pkg:npm/cssom@0.3.2",
        "pkg:npm/cssstyle@0.2.37",
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/d@1.0.0",
        "pkg:npm/damerau-levenshtein@1.0.4",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/date-now@0.1.4",
        "pkg:npm/debug@2.6.7",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/default-require-extensions@1.0.0",
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/del@2.2.2",
        "pkg:npm/del@3.0.0",
        "pkg:npm/delayed-stream@1.0.0",
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/depd@1.1.0",
        "pkg:npm/des.js@1.0.0",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/detect-indent@4.0.0",
        "pkg:npm/detect-node@2.0.3",
        "pkg:npm/detect-port-alt@1.1.3",
        "pkg:npm/diff@3.3.0",
        "pkg:npm/diffie-hellman@5.0.2",
        "pkg:npm/dns-equal@1.0.0",
        "pkg:npm/dns-packet@1.1.1",
        "pkg:npm/dns-txt@2.0.2",
        "pkg:npm/doctrine@1.5.0",
        "pkg:npm/doctrine@2.0.0",
        "pkg:npm/dom-converter@0.1.4",
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/dom-urls@1.1.0",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.1.0",
        "pkg:npm/domutils@1.1.6",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/dot-prop@3.0.0",
        "pkg:npm/dotenv@4.0.0",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/ee-first@1.1.1",
        "pkg:npm/electron-to-chromium@1.3.16",
        "pkg:npm/elliptic@6.4.0",
        "pkg:npm/emoji-regex@6.5.0",
        "pkg:npm/emojis-list@2.1.0",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/encoding@0.1.12",
        "pkg:npm/enhanced-resolve@3.4.1",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/enzyme-adapter-react-15@1.0.5",
        "pkg:npm/enzyme@3.1.1",
        "pkg:npm/errno@0.1.4",
        "pkg:npm/error-ex@1.3.1",
        "pkg:npm/es-abstract@1.7.0",
        "pkg:npm/es-to-primitive@1.1.1",
        "pkg:npm/es5-ext@0.10.24",
        "pkg:npm/es6-iterator@2.0.1",
        "pkg:npm/es6-map@0.1.5",
        "pkg:npm/es6-promise@4.1.1",
        "pkg:npm/es6-set@0.1.5",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/escodegen@1.8.1",
        "pkg:npm/escope@3.6.0",
        "pkg:npm/eslint-config-react-app@1.0.5",
        "pkg:npm/eslint-import-resolver-node@0.2.3",
        "pkg:npm/eslint-loader@1.7.1",
        "pkg:npm/eslint-module-utils@2.1.1",
        "pkg:npm/eslint-plugin-flowtype@2.34.0",
        "pkg:npm/eslint-plugin-import@2.2.0",
        "pkg:npm/eslint-plugin-jsx-a11y@5.0.3",
        "pkg:npm/eslint-plugin-react@7.1.0",
        "pkg:npm/eslint@3.19.0",
        "pkg:npm/espree@3.4.3",
        "pkg:npm/esprima@2.7.3",
        "pkg:npm/esprima@4.0.0",
        "pkg:npm/esquery@1.0.0",
        "pkg:npm/esrecurse@4.2.0",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/etag@1.8.0",
        "pkg:npm/event-emitter@0.3.5",
        "pkg:npm/eventemitter3@1.2.0",
        "pkg:npm/events@1.1.1",
        "pkg:npm/eventsource@0.1.6",
        "pkg:npm/evp_bytestokey@1.0.0",
        "pkg:npm/exec-sh@0.2.0",
        "pkg:npm/exit-hook@1.1.1",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/express@4.15.3",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/external-editor@2.0.4",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/extract-text-webpack-plugin@2.1.2",
        "pkg:npm/extsprintf@1.0.2",
        "pkg:npm/fast-deep-equal@1.0.0",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/fastparse@1.1.1",
        "pkg:npm/faye-websocket@0.10.0",
        "pkg:npm/faye-websocket@0.11.1",
        "pkg:npm/fb-watchman@1.9.2",
        "pkg:npm/fb-watchman@2.0.0",
        "pkg:npm/fbjs@0.8.12",
        "pkg:npm/figures@1.7.0",
        "pkg:npm/figures@2.0.0",
        "pkg:npm/file-entry-cache@2.0.0",
        "pkg:npm/file-loader@0.11.2",
        "pkg:npm/filename-regex@2.0.1",
        "pkg:npm/fileset@2.0.3",
        "pkg:npm/filesize@3.3.0",
        "pkg:npm/fill-range@2.2.3",
        "pkg:npm/filled-array@1.1.0",
        "pkg:npm/finalhandler@1.0.3",
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/flat-cache@1.2.2",
        "pkg:npm/flatten@1.0.2",
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/for-own@0.1.5",
        "pkg:npm/foreach@2.0.5",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.1.4",
        "pkg:npm/forwarded@0.1.0",
        "pkg:npm/fresh@0.5.0",
        "pkg:npm/fs-extra@0.30.0",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/fsevents@1.1.2",
        "pkg:npm/fstream-ignore@1.0.5",
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/function-bind@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/generate-function@2.0.0",
        "pkg:npm/generate-object-property@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/gh-pages@1.0.0",
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/globals@9.18.0",
        "pkg:npm/globby@5.0.0",
        "pkg:npm/globby@6.1.0",
        "pkg:npm/got@5.7.1",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/graceful-readlink@1.0.1",
        "pkg:npm/growly@1.3.0",
        "pkg:npm/gulp-babel@6.1.2",
        "pkg:npm/gulp-insert@0.4.0",
        "pkg:npm/gulp-plumber@1.1.0",
        "pkg:npm/gulp-rename@1.2.2",
        "pkg:npm/gulp-sourcemaps@2.6.0",
        "pkg:npm/gulp-uglify@1.5.4",
        "pkg:npm/gulp@3.9.1",
        "pkg:npm/gzip-size@3.0.0",
        "pkg:npm/handle-thing@1.2.5",
        "pkg:npm/handlebars@4.0.10",
        "pkg:npm/har-schema@1.0.5",
        "pkg:npm/har-validator@4.2.1",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/has-flag@1.0.0",
        "pkg:npm/has-flag@2.0.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/has@1.0.1",
        "pkg:npm/hash-base@2.0.2",
        "pkg:npm/hash.js@1.1.3",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/he@1.1.1",
        "pkg:npm/hmac-drbg@1.0.1",
        "pkg:npm/hoek@2.16.3",
        "pkg:npm/home-or-tmp@2.0.0",
        "pkg:npm/hosted-git-info@2.5.0",
        "pkg:npm/hpack.js@2.1.6",
        "pkg:npm/html-comment-regex@1.1.1",
        "pkg:npm/html-encoding-sniffer@1.0.1",
        "pkg:npm/html-entities@1.2.1",
        "pkg:npm/html-minifier@3.5.3",
        "pkg:npm/html-webpack-plugin@2.29.0",
        "pkg:npm/htmlparser2@3.3.0",
        "pkg:npm/http-deceiver@1.2.7",
        "pkg:npm/http-errors@1.6.1",
        "pkg:npm/http-proxy-middleware@0.17.4",
        "pkg:npm/http-proxy@1.16.2",
        "pkg:npm/http-signature@1.1.1",
        "pkg:npm/https-browserify@0.0.1",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/iconv-lite@0.4.18",
        "pkg:npm/icss-replace-symbols@1.1.0",
        "pkg:npm/icss-utils@2.1.0",
        "pkg:npm/ieee754@1.1.8",
        "pkg:npm/ignore@3.3.3",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/indexes-of@1.0.1",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/inquirer@0.12.0",
        "pkg:npm/inquirer@3.1.1",
        "pkg:npm/internal-ip@1.2.0",
        "pkg:npm/interpret@1.0.3",
        "pkg:npm/invariant@2.2.2",
        "pkg:npm/invert-kv@1.0.0",
        "pkg:npm/ip@1.1.5",
        "pkg:npm/ipaddr.js@1.3.0",
        "pkg:npm/is-absolute-url@2.1.0",
        "pkg:npm/is-arrayish@0.2.1",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-buffer@1.1.5",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/is-callable@1.1.3",
        "pkg:npm/is-ci@1.0.10",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-directory@0.3.1",
        "pkg:npm/is-dotfile@1.0.3",
        "pkg:npm/is-equal-shallow@0.1.3",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-extglob@2.1.1",
        "pkg:npm/is-finite@1.0.2",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/is-my-json-valid@2.16.0",
        "pkg:npm/is-npm@1.0.0",
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/is-obj@1.0.1",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/is-path-inside@1.0.0",
        "pkg:npm/is-plain-obj@1.1.0",
        "pkg:npm/is-posix-bracket@0.1.1",
        "pkg:npm/is-primitive@2.0.0",
        "pkg:npm/is-promise@2.1.0",
        "pkg:npm/is-property@1.0.2",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/is-resolvable@1.0.0",
        "pkg:npm/is-retry-allowed@1.1.0",
        "pkg:npm/is-root@1.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/is-svg@2.1.0",
        "pkg:npm/is-symbol@1.0.1",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/is-utf8@0.2.1",
        "pkg:npm/is-wsl@1.1.0",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/isexe@2.0.0",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/isomorphic-fetch@2.2.1",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/istanbul-api@1.1.11",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-hook@1.0.7",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/istanbul-lib-report@1.1.1",
        "pkg:npm/istanbul-lib-source-maps@1.2.1",
        "pkg:npm/istanbul-reports@1.1.1",
        "pkg:npm/jest-changed-files@20.0.3",
        "pkg:npm/jest-cli@18.1.0",
        "pkg:npm/jest-cli@20.0.4",
        "pkg:npm/jest-config@20.0.4",
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-docblock@20.0.3",
        "pkg:npm/jest-environment-jsdom@20.0.3",
        "pkg:npm/jest-environment-node@20.0.3",
        "pkg:npm/jest-haste-map@20.0.5",
        "pkg:npm/jest-jasmine2@20.0.4",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-matchers@20.0.3",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve-dependencies@20.0.3",
        "pkg:npm/jest-resolve@20.0.4",
        "pkg:npm/jest-runtime@20.0.4",
        "pkg:npm/jest-snapshot@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/jest-validate@20.0.3",
        "pkg:npm/jest@18.1.0",
        "pkg:npm/jest@20.0.4",
        "pkg:npm/js-base64@2.1.9",
        "pkg:npm/js-tokens@3.0.2",
        "pkg:npm/js-yaml@3.7.0",
        "pkg:npm/js-yaml@3.9.0",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/jschardet@1.5.0",
        "pkg:npm/jsdom@7.2.2",
        "pkg:npm/jsdom@9.12.0",
        "pkg:npm/jsesc@0.5.0",
        "pkg:npm/jsesc@1.3.0",
        "pkg:npm/json-loader@0.5.7",
        "pkg:npm/json-schema-traverse@0.3.1",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/jsonfile@2.4.0",
        "pkg:npm/jsonfile@3.0.1",
        "pkg:npm/jsonify@0.0.0",
        "pkg:npm/jsonpointer@4.0.1",
        "pkg:npm/jsprim@1.4.0",
        "pkg:npm/jsx-ast-utils@1.4.1",
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/kind-of@4.0.0",
        "pkg:npm/klaw@1.3.1",
        "pkg:npm/latest-version@2.0.0",
        "pkg:npm/lazy-cache@1.0.4",
        "pkg:npm/lazy-req@1.1.0",
        "pkg:npm/lcid@1.0.0",
        "pkg:npm/leven@2.1.0",
        "pkg:npm/levn@0.3.0",
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/loader-fs-cache@1.0.1",
        "pkg:npm/loader-runner@2.3.0",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/locate-path@2.0.0",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.camelcase@4.3.0",
        "pkg:npm/lodash.cond@4.5.2",
        "pkg:npm/lodash.defaults@4.2.0",
        "pkg:npm/lodash.memoize@4.1.2",
        "pkg:npm/lodash.template@4.4.0",
        "pkg:npm/lodash.templatesettings@4.1.0",
        "pkg:npm/lodash.uniq@4.5.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/lower-case@1.1.4",
        "pkg:npm/lowercase-keys@1.0.0",
        "pkg:npm/lru-cache@4.1.1",
        "pkg:npm/macaddress@0.2.8",
        "pkg:npm/makeerror@1.0.11",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/math-expression-evaluator@1.2.17",
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/merge@1.2.0",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/miller-rabin@4.0.0",
        "pkg:npm/mime-db@1.27.0",
        "pkg:npm/mime-db@1.29.0",
        "pkg:npm/mime-types@2.1.15",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/mime@1.3.6",
        "pkg:npm/mimic-fn@1.1.0",
        "pkg:npm/minimalistic-assert@1.0.0",
        "pkg:npm/minimalistic-crypto-utils@1.0.1",
        "pkg:npm/minimatch@3.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/mocha@3.4.2",
        "pkg:npm/moment-timezone@0.5.21",
        "pkg:npm/moment@2.18.1",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/multicast-dns-service-types@1.1.0",
        "pkg:npm/multicast-dns@6.1.1",
        "pkg:npm/mute-stream@0.0.5",
        "pkg:npm/mute-stream@0.0.7",
        "pkg:npm/nan@2.6.2",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/ncname@1.0.0",
        "pkg:npm/negotiator@0.6.1",
        "pkg:npm/no-case@2.3.1",
        "pkg:npm/node-fetch@1.7.1",
        "pkg:npm/node-forge@0.6.33",
        "pkg:npm/node-int64@0.4.0",
        "pkg:npm/node-libs-browser@2.0.0",
        "pkg:npm/node-notifier@5.1.2",
        "pkg:npm/node-pre-gyp@0.6.36",
        "pkg:npm/node-status-codes@1.0.0",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/normalize-url@1.9.1",
        "pkg:npm/npmlog@4.1.2",
        "pkg:npm/nth-check@1.0.1",
        "pkg:npm/num2fraction@1.2.2",
        "pkg:npm/number-is-nan@1.0.1",
        "pkg:npm/nwmatcher@1.4.1",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/object-assign@3.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/object-hash@1.1.8",
        "pkg:npm/object-keys@1.0.11",
        "pkg:npm/object.omit@2.0.1",
        "pkg:npm/obuf@1.1.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/onetime@1.1.0",
        "pkg:npm/onetime@2.0.1",
        "pkg:npm/opn@4.0.2",
        "pkg:npm/opn@5.1.0",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/optionator@0.8.2",
        "pkg:npm/original@1.0.0",
        "pkg:npm/os-browserify@0.2.1",
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/os-tmpdir@1.0.2",
        "pkg:npm/osenv@0.1.4",
        "pkg:npm/p-limit@1.1.0",
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/p-map@1.1.1",
        "pkg:npm/package-json@2.4.0",
        "pkg:npm/pako@0.2.9",
        "pkg:npm/param-case@2.1.1",
        "pkg:npm/parse-asn1@5.1.0",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/parse5@1.5.1",
        "pkg:npm/parseurl@1.3.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/path-exists@3.0.0",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/path-is-inside@1.0.2",
        "pkg:npm/path-parse@1.0.5",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/path-to-regexp@1.7.0",
        "pkg:npm/path-type@1.1.0",
        "pkg:npm/pbkdf2@3.0.12",
        "pkg:npm/performance-now@0.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pify@3.0.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/pinkie@2.0.4",
        "pkg:npm/pkg-dir@1.0.0",
        "pkg:npm/pkg-up@1.0.0",
        "pkg:npm/pluralize@1.2.1",
        "pkg:npm/portfinder@1.0.13",
        "pkg:npm/postcss-calc@5.3.1",
        "pkg:npm/postcss-colormin@2.2.2",
        "pkg:npm/postcss-convert-values@2.6.1",
        "pkg:npm/postcss-discard-comments@2.0.4",
        "pkg:npm/postcss-discard-duplicates@2.1.0",
        "pkg:npm/postcss-discard-empty@2.1.0",
        "pkg:npm/postcss-discard-overridden@0.1.1",
        "pkg:npm/postcss-discard-unused@2.2.3",
        "pkg:npm/postcss-filter-plugins@2.0.2",
        "pkg:npm/postcss-flexbugs-fixes@3.0.0",
        "pkg:npm/postcss-load-config@1.2.0",
        "pkg:npm/postcss-load-options@1.2.0",
        "pkg:npm/postcss-load-plugins@2.3.0",
        "pkg:npm/postcss-loader@2.0.6",
        "pkg:npm/postcss-merge-idents@2.1.7",
        "pkg:npm/postcss-merge-longhand@2.0.2",
        "pkg:npm/postcss-merge-rules@2.1.2",
        "pkg:npm/postcss-message-helpers@2.0.0",
        "pkg:npm/postcss-minify-font-values@1.0.5",
        "pkg:npm/postcss-minify-gradients@1.0.5",
        "pkg:npm/postcss-minify-params@1.2.2",
        "pkg:npm/postcss-minify-selectors@2.1.1",
        "pkg:npm/postcss-modules-extract-imports@1.2.0",
        "pkg:npm/postcss-modules-local-by-default@1.2.0",
        "pkg:npm/postcss-modules-scope@1.1.0",
        "pkg:npm/postcss-modules-values@1.3.0",
        "pkg:npm/postcss-normalize-charset@1.1.1",
        "pkg:npm/postcss-normalize-url@3.0.8",
        "pkg:npm/postcss-ordered-values@2.2.3",
        "pkg:npm/postcss-reduce-idents@2.4.0",
        "pkg:npm/postcss-reduce-initial@1.0.1",
        "pkg:npm/postcss-reduce-transforms@1.0.4",
        "pkg:npm/postcss-selector-parser@2.2.3",
        "pkg:npm/postcss-svgo@2.1.6",
        "pkg:npm/postcss-unique-selectors@2.0.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss-zindex@2.2.0",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/postcss@6.0.8",
        "pkg:npm/pre-commit@1.2.2",
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/prepend-http@1.0.4",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/pretty-bytes@4.0.2",
        "pkg:npm/pretty-error@2.1.1",
        "pkg:npm/pretty-format@20.0.3",
        "pkg:npm/private@0.1.7",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/process@0.11.10",
        "pkg:npm/progress@1.1.8",
        "pkg:npm/promise@7.1.1",
        "pkg:npm/prop-types@15.5.10",
        "pkg:npm/proxy-addr@1.1.4",
        "pkg:npm/prr@0.0.0",
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/public-encrypt@4.0.0",
        "pkg:npm/punycode@1.3.2",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/q@1.5.0",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/query-string@4.3.4",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/querystring@0.2.0",
        "pkg:npm/querystringify@0.0.4",
        "pkg:npm/querystringify@1.0.0",
        "pkg:npm/randomatic@1.1.7",
        "pkg:npm/randombytes@2.0.5",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/rc@1.2.1",
        "pkg:npm/react-addons-test-utils@15.6.0",
        "pkg:npm/react-datetime@2.8.10",
        "pkg:npm/react-dev-utils@3.0.2",
        "pkg:npm/react-dom@15.6.1",
        "pkg:npm/react-error-overlay@1.0.9",
        "pkg:npm/react-onclickoutside@5.11.1",
        "pkg:npm/react-onclickoutside@6.5.0",
        "pkg:npm/react-scripts@1.0.10",
        "pkg:npm/react-test-renderer@15.6.1",
        "pkg:npm/react@15.6.1",
        "pkg:npm/read-all-stream@3.1.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/read-pkg@1.1.0",
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/readdirp@2.1.0",
        "pkg:npm/readline2@1.0.1",
        "pkg:npm/rechoir@0.6.2",
        "pkg:npm/recursive-readdir@2.2.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/reduce-css-calc@1.3.0",
        "pkg:npm/reduce-function-call@1.0.2",
        "pkg:npm/regenerate@1.3.2",
        "pkg:npm/regenerator-runtime@0.10.5",
        "pkg:npm/regenerator-transform@0.9.11",
        "pkg:npm/regex-cache@0.4.3",
        "pkg:npm/regexpu-core@1.0.0",
        "pkg:npm/regexpu-core@2.0.0",
        "pkg:npm/registry-auth-token@3.3.1",
        "pkg:npm/registry-url@3.1.0",
        "pkg:npm/regjsgen@0.2.0",
        "pkg:npm/regjsparser@0.1.5",
        "pkg:npm/relateurl@0.2.7",
        "pkg:npm/remove-trailing-separator@1.0.2",
        "pkg:npm/renderkid@2.0.1",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.6.1",
        "pkg:npm/repeating@2.0.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-from-string@1.2.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/require-uncached@1.0.3",
        "pkg:npm/requires-port@1.0.0",
        "pkg:npm/resolve-from@1.0.1",
        "pkg:npm/resolve@1.1.7",
        "pkg:npm/resolve@1.3.3",
        "pkg:npm/restore-cursor@1.0.1",
        "pkg:npm/restore-cursor@2.0.0",
        "pkg:npm/right-align@0.1.3",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/run-async@0.1.0",
        "pkg:npm/run-async@2.3.0",
        "pkg:npm/rx-lite-aggregates@4.0.8",
        "pkg:npm/rx-lite@3.1.2",
        "pkg:npm/rx-lite@4.0.8",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/sane@1.6.0",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/schema-utils@0.3.0",
        "pkg:npm/select-hose@2.0.0",
        "pkg:npm/selfsigned@1.9.1",
        "pkg:npm/semver-diff@2.1.0",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/send@0.15.3",
        "pkg:npm/serve-index@1.9.0",
        "pkg:npm/serve-static@1.12.3",
        "pkg:npm/serviceworker-cache-polyfill@4.0.0",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/set-immediate-shim@1.0.1",
        "pkg:npm/setimmediate@1.0.5",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/settle-promise@1.0.0",
        "pkg:npm/sha.js@2.4.8",
        "pkg:npm/shell-quote@1.6.1",
        "pkg:npm/shelljs@0.7.8",
        "pkg:npm/shellwords@0.1.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/slice-ansi@0.0.4",
        "pkg:npm/slide@1.1.6",
        "pkg:npm/sntp@1.0.9",
        "pkg:npm/sockjs-client@1.1.2",
        "pkg:npm/sockjs-client@1.1.4",
        "pkg:npm/sockjs@0.3.18",
        "pkg:npm/sort-keys@1.1.2",
        "pkg:npm/source-list-map@0.1.8",
        "pkg:npm/source-list-map@1.1.2",
        "pkg:npm/source-list-map@2.0.0",
        "pkg:npm/source-map-support@0.4.15",
        "pkg:npm/source-map@0.2.0",
        "pkg:npm/source-map@0.4.4",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-expression-parse@1.0.4",
        "pkg:npm/spdx-license-ids@1.2.2",
        "pkg:npm/spdy-transport@2.0.20",
        "pkg:npm/spdy@3.4.7",
        "pkg:npm/sprintf-js@1.0.3",
        "pkg:npm/sshpk@1.13.1",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/strict-uri-encode@1.1.0",
        "pkg:npm/string-length@1.0.1",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/strip-ansi@4.0.0",
        "pkg:npm/strip-bom@2.0.0",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/strip-indent@1.0.1",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/style-loader@0.18.2",
        "pkg:npm/supports-color@2.0.0",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/supports-color@4.2.1",
        "pkg:npm/svgo@0.7.2",
        "pkg:npm/sw-precache-webpack-plugin@0.11.3",
        "pkg:npm/sw-precache@5.2.0",
        "pkg:npm/sw-toolbox@3.6.0",
        "pkg:npm/symbol-tree@3.2.2",
        "pkg:npm/table@3.8.3",
        "pkg:npm/tapable@0.2.7",
        "pkg:npm/tar-pack@3.4.0",
        "pkg:npm/tar@2.2.1",
        "pkg:npm/test-exclude@4.1.1",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/throat@3.2.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/through@2.3.8",
        "pkg:npm/thunky@0.1.0",
        "pkg:npm/timed-out@3.1.3",
        "pkg:npm/timers-browserify@2.0.2",
        "pkg:npm/tmp@0.0.31",
        "pkg:npm/tmpl@1.0.4",
        "pkg:npm/to-arraybuffer@1.0.1",
        "pkg:npm/to-fast-properties@1.0.3",
        "pkg:npm/toposort@1.0.3",
        "pkg:npm/tough-cookie@2.3.2",
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/trim-newlines@1.0.0",
        "pkg:npm/trim-right@1.0.1",
        "pkg:npm/tryit@1.0.3",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/tweetnacl@0.14.5",
        "pkg:npm/type-check@0.3.2",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/typedarray@0.0.6",
        "pkg:npm/typescript@2.4.2",
        "pkg:npm/ua-parser-js@0.7.14",
        "pkg:npm/uglify-js@2.8.29",
        "pkg:npm/uglify-js@3.0.26",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/uid-number@0.0.6",
        "pkg:npm/uniq@1.0.1",
        "pkg:npm/uniqid@4.1.1",
        "pkg:npm/uniqs@2.0.0",
        "pkg:npm/universalify@0.1.1",
        "pkg:npm/unpipe@1.0.0",
        "pkg:npm/unzip-response@1.0.2",
        "pkg:npm/update-notifier@1.0.3",
        "pkg:npm/upper-case@1.1.3",
        "pkg:npm/urijs@1.18.10",
        "pkg:npm/url-loader@0.5.9",
        "pkg:npm/url-parse-lax@1.0.0",
        "pkg:npm/url-parse@1.0.5",
        "pkg:npm/url-parse@1.1.9",
        "pkg:npm/url@0.11.0",
        "pkg:npm/user-home@2.0.0",
        "pkg:npm/util-deprecate@1.0.2",
        "pkg:npm/util@0.10.3",
        "pkg:npm/utila@0.3.3",
        "pkg:npm/utila@0.4.0",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/uuid@2.0.3",
        "pkg:npm/uuid@3.1.0",
        "pkg:npm/validate-npm-package-license@3.0.1",
        "pkg:npm/vary@1.1.1",
        "pkg:npm/vendors@1.0.1",
        "pkg:npm/verror@1.3.6",
        "pkg:npm/vm-browserify@0.0.4",
        "pkg:npm/walker@1.0.7",
        "pkg:npm/watch@0.10.0",
        "pkg:npm/watchpack@1.4.0",
        "pkg:npm/wbuf@1.7.2",
        "pkg:npm/webidl-conversions@3.0.1",
        "pkg:npm/webidl-conversions@4.0.1",
        "pkg:npm/webpack-dev-middleware@1.11.0",
        "pkg:npm/webpack-dev-server@1.16.5",
        "pkg:npm/webpack-dev-server@2.5.0",
        "pkg:npm/webpack-manifest-plugin@1.1.0",
        "pkg:npm/webpack-sources@0.2.3",
        "pkg:npm/webpack-sources@1.0.1",
        "pkg:npm/webpack-stream@3.2.0",
        "pkg:npm/webpack@2.6.1",
        "pkg:npm/webpack@2.7.0",
        "pkg:npm/websocket-driver@0.6.5",
        "pkg:npm/websocket-extensions@0.1.1",
        "pkg:npm/whatwg-encoding@1.0.1",
        "pkg:npm/whatwg-fetch@2.0.3",
        "pkg:npm/whatwg-url@4.8.0",
        "pkg:npm/whet.extend@0.9.9",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/which@1.2.14",
        "pkg:npm/wide-align@1.1.2",
        "pkg:npm/widest-line@1.0.0",
        "pkg:npm/window-size@0.1.0",
        "pkg:npm/wordwrap@0.0.2",
        "pkg:npm/wordwrap@1.0.0",
        "pkg:npm/worker-farm@1.4.1",
        "pkg:npm/wrap-ansi@2.1.0",
        "pkg:npm/wrappy@1.0.2",
        "pkg:npm/write-file-atomic@1.3.4",
        "pkg:npm/write@0.2.1",
        "pkg:npm/xdg-basedir@2.0.0",
        "pkg:npm/xml-char-classes@1.0.0",
        "pkg:npm/xml-name-validator@2.0.1",
        "pkg:npm/xtend@4.0.1",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yallist@2.1.2",
        "pkg:npm/yargs-parser@4.2.1",
        "pkg:npm/yargs-parser@5.0.0",
        "pkg:npm/yargs@3.10.0",
        "pkg:npm/yargs@6.6.0",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/react-datetime@2.8.10",
      "dependsOn": [
        "pkg:npm/create-react-class@15.6.0",
        "pkg:npm/object-assign@3.0.0",
        "pkg:npm/prop-types@15.5.10",
        "pkg:npm/react-onclickoutside@5.11.1"
      ]
    },
    {
      "ref": "pkg:npm/promise@7.1.1",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/react-scripts@1.0.10",
      "dependsOn": [
        "pkg:npm/autoprefixer@7.1.1",
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-eslint@7.2.3",
        "pkg:npm/babel-jest@20.0.3",
        "pkg:npm/babel-loader@7.0.0",
        "pkg:npm/babel-preset-react-app@3.0.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/css-loader@0.28.4",
        "pkg:npm/dotenv@4.0.0",
        "pkg:npm/eslint-config-react-app@1.0.5",
        "pkg:npm/eslint-loader@1.7.1",
        "pkg:npm/eslint-plugin-flowtype@2.34.0",
        "pkg:npm/eslint-plugin-import@2.2.0",
        "pkg:npm/eslint-plugin-jsx-a11y@5.0.3",
        "pkg:npm/eslint-plugin-react@7.1.0",
        "pkg:npm/eslint@3.19.0",
        "pkg:npm/extract-text-webpack-plugin@2.1.2",
        "pkg:npm/file-loader@0.11.2",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/fsevents@1.1.2",
        "pkg:npm/html-webpack-plugin@2.29.0",
        "pkg:npm/jest@20.0.4",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-flexbugs-fixes@3.0.0",
        "pkg:npm/postcss-loader@2.0.6",
        "pkg:npm/promise@7.1.1",
        "pkg:npm/react-dev-utils@3.0.2",
        "pkg:npm/react-error-overlay@1.0.9",
        "pkg:npm/style-loader@0.18.2",
        "pkg:npm/sw-precache-webpack-plugin@0.11.3",
        "pkg:npm/url-loader@0.5.9",
        "pkg:npm/webpack-dev-server@2.5.0",
        "pkg:npm/webpack-manifest-plugin@1.1.0",
        "pkg:npm/webpack@2.6.1",
        "pkg:npm/whatwg-fetch@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/demo@0.1.0",
      "dependsOn": [
        "pkg:npm/moment@2.18.1",
        "pkg:npm/react-datetime@2.8.10",
        "pkg:npm/react-dom@15.6.1",
        "pkg:npm/react-scripts@1.0.10",
        "pkg:npm/react@15.6.1"
      ]
    },
    {
      "ref": "pkg:npm/address@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@5.2.2",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/fast-deep-equal@1.0.0",
        "pkg:npm/json-schema-traverse@0.3.1",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/alphanum-sort@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anser@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anser@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-align@1.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-escapes@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-html@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.0",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.0"
      ]
    },
    {
      "ref": "pkg:npm/aproba@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aria-query@0.5.0",
      "dependsOn": [
        "pkg:npm/ast-types-flow@0.0.7"
      ]
    },
    {
      "ref": "pkg:npm/array-filter@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-find-index@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-flatten@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-includes@3.0.3",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/es-abstract@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/array-map@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-reduce@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-types-flow@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@2.1.4",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/autoprefixer@7.1.1",
      "dependsOn": [
        "pkg:npm/browserslist@2.2.2",
        "pkg:npm/caniuse-lite@1.0.30000704",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/num2fraction@1.2.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/autoprefixer@6.7.7",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-db@1.0.30000704",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/num2fraction@1.2.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/axobject-query@0.1.0",
      "dependsOn": [
        "pkg:npm/ast-types-flow@0.0.7"
      ]
    },
    {
      "ref": "pkg:npm/babel-eslint@7.2.3",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0",
        "pkg:npm/babylon@6.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-traverse@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-jest@20.0.3",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-plugin-istanbul@4.1.4",
        "pkg:npm/babel-preset-jest@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/babel-loader@7.0.0",
      "dependsOn": [
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-dynamic-import-node@1.0.2",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-template@6.25.0",
        "pkg:npm/babel-types@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-istanbul@4.1.4",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/test-exclude@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.25.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
        "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-object-rest-spread@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-env@1.5.2",
      "dependsOn": [
        "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
        "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
        "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
        "pkg:npm/browserslist@2.2.2",
        "pkg:npm/invariant@2.2.2",
        "pkg:npm/semver@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-jest@20.0.3",
      "dependsOn": [
        "pkg:npm/babel-plugin-jest-hoist@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-react-app@3.0.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-dynamic-import-node@1.0.2",
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-object-rest-spread@6.23.0",
        "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
        "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.24.1",
        "pkg:npm/babel-plugin-transform-runtime@6.23.0",
        "pkg:npm/babel-preset-env@1.5.2",
        "pkg:npm/babel-preset-react@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/base64url@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@3.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bonjour@3.5.0",
      "dependsOn": [
        "pkg:npm/array-flatten@2.1.1",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/dns-equal@1.0.0",
        "pkg:npm/dns-txt@2.0.2",
        "pkg:npm/multicast-dns-service-types@1.1.0",
        "pkg:npm/multicast-dns@6.1.1"
      ]
    },
    {
      "ref": "pkg:npm/boxen@0.6.0",
      "dependsOn": [
        "pkg:npm/ansi-align@1.1.0",
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-boxes@1.0.0",
        "pkg:npm/filled-array@1.1.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/repeating@2.0.1",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/widest-line@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/browserslist@1.7.7",
      "dependsOn": [
        "pkg:npm/caniuse-db@1.0.30000704",
        "pkg:npm/electron-to-chromium@1.3.16"
      ]
    },
    {
      "ref": "pkg:npm/browserslist@2.2.2",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30000704",
        "pkg:npm/electron-to-chromium@1.3.16"
      ]
    },
    {
      "ref": "pkg:npm/bser@2.0.0",
      "dependsOn": [
        "pkg:npm/node-int64@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/buffer-indexof@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camel-case@3.0.0",
      "dependsOn": [
        "pkg:npm/no-case@2.3.1",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/camelcase-keys@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-api@1.6.1",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-db@1.0.30000704",
        "pkg:npm/lodash.memoize@4.1.2",
        "pkg:npm/lodash.uniq@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/caniuse-db@1.0.30000704",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30000704",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/capture-stack-trace@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@2.0.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/clap@1.2.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@4.1.7",
      "dependsOn": [
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/cli-boxes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-cursor@2.1.0",
      "dependsOn": [
        "pkg:npm/restore-cursor@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/coa@1.0.4",
      "dependsOn": [
        "pkg:npm/q@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/color-convert@1.9.0",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-string@0.3.0",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/color@0.11.4",
      "dependsOn": [
        "pkg:npm/clone@1.0.2",
        "pkg:npm/color-convert@1.9.0",
        "pkg:npm/color-string@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/colormin@1.1.2",
      "dependsOn": [
        "pkg:npm/color@0.11.4",
        "pkg:npm/css-color-names@0.0.4",
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/configstore@2.1.0",
      "dependsOn": [
        "pkg:npm/dot-prop@3.0.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/os-tmpdir@1.0.2",
        "pkg:npm/osenv@0.1.4",
        "pkg:npm/uuid@2.0.3",
        "pkg:npm/write-file-atomic@1.3.4",
        "pkg:npm/xdg-basedir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/contains-path@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cosmiconfig@2.2.2",
      "dependsOn": [
        "pkg:npm/is-directory@0.3.1",
        "pkg:npm/js-yaml@3.9.0",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/require-from-string@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/create-error-class@3.0.2",
      "dependsOn": [
        "pkg:npm/capture-stack-trace@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@4.0.2",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.1",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/css-color-names@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-loader@0.28.4",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/cssnano@3.10.0",
        "pkg:npm/icss-utils@2.1.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/lodash.camelcase@4.3.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-modules-extract-imports@1.2.0",
        "pkg:npm/postcss-modules-local-by-default@1.2.0",
        "pkg:npm/postcss-modules-scope@1.1.0",
        "pkg:npm/postcss-modules-values@1.3.0",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/source-list-map@0.1.8"
      ]
    },
    {
      "ref": "pkg:npm/css-selector-tokenizer@0.7.0",
      "dependsOn": [
        "pkg:npm/cssesc@0.1.0",
        "pkg:npm/fastparse@1.1.1",
        "pkg:npm/regexpu-core@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cssesc@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssnano@3.10.0",
      "dependsOn": [
        "pkg:npm/autoprefixer@6.7.7",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/has@1.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-calc@5.3.1",
        "pkg:npm/postcss-colormin@2.2.2",
        "pkg:npm/postcss-convert-values@2.6.1",
        "pkg:npm/postcss-discard-comments@2.0.4",
        "pkg:npm/postcss-discard-duplicates@2.1.0",
        "pkg:npm/postcss-discard-empty@2.1.0",
        "pkg:npm/postcss-discard-overridden@0.1.1",
        "pkg:npm/postcss-discard-unused@2.2.3",
        "pkg:npm/postcss-filter-plugins@2.0.2",
        "pkg:npm/postcss-merge-idents@2.1.7",
        "pkg:npm/postcss-merge-longhand@2.0.2",
        "pkg:npm/postcss-merge-rules@2.1.2",
        "pkg:npm/postcss-minify-font-values@1.0.5",
        "pkg:npm/postcss-minify-gradients@1.0.5",
        "pkg:npm/postcss-minify-params@1.2.2",
        "pkg:npm/postcss-minify-selectors@2.1.1",
        "pkg:npm/postcss-normalize-charset@1.1.1",
        "pkg:npm/postcss-normalize-url@3.0.8",
        "pkg:npm/postcss-ordered-values@2.2.3",
        "pkg:npm/postcss-reduce-idents@2.4.0",
        "pkg:npm/postcss-reduce-initial@1.0.1",
        "pkg:npm/postcss-reduce-transforms@1.0.4",
        "pkg:npm/postcss-svgo@2.1.6",
        "pkg:npm/postcss-unique-selectors@2.0.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss-zindex@2.2.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/csso@2.3.2",
      "dependsOn": [
        "pkg:npm/clap@1.2.0",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/currently-unhandled@0.4.1",
      "dependsOn": [
        "pkg:npm/array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/damerau-levenshtein@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defined@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/del@3.0.0",
      "dependsOn": [
        "pkg:npm/globby@6.1.0",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/p-map@1.1.1",
        "pkg:npm/pify@3.0.0",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/detect-node@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-port-alt@1.1.3",
      "dependsOn": [
        "pkg:npm/address@1.0.2",
        "pkg:npm/debug@2.6.8"
      ]
    },
    {
      "ref": "pkg:npm/dns-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-packet@1.1.1",
      "dependsOn": [
        "pkg:npm/ip@1.1.5",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/dns-txt@2.0.2",
      "dependsOn": [
        "pkg:npm/buffer-indexof@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/doctrine@1.5.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dom-converter@0.1.4",
      "dependsOn": [
        "pkg:npm/utila@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/dom-urls@1.1.0",
      "dependsOn": [
        "pkg:npm/urijs@1.18.10"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.1.6",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/dot-prop@3.0.0",
      "dependsOn": [
        "pkg:npm/is-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/dotenv@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer2@0.1.4",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.3.16",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@6.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es6-promise@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-config-react-app@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-node@0.2.3",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/resolve@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/eslint-loader@1.7.1",
      "dependsOn": [
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/loader-fs-cache@1.0.1",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/object-hash@1.1.8",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-module-utils@2.1.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-flowtype@2.34.0",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-import@2.2.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/contains-path@0.1.0",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/doctrine@1.5.0",
        "pkg:npm/eslint-import-resolver-node@0.2.3",
        "pkg:npm/eslint-module-utils@2.1.1",
        "pkg:npm/has@1.0.1",
        "pkg:npm/lodash.cond@4.5.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/pkg-up@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-jsx-a11y@5.0.3",
      "dependsOn": [
        "pkg:npm/aria-query@0.5.0",
        "pkg:npm/array-includes@3.0.3",
        "pkg:npm/ast-types-flow@0.0.7",
        "pkg:npm/axobject-query@0.1.0",
        "pkg:npm/damerau-levenshtein@1.0.4",
        "pkg:npm/emoji-regex@6.5.0",
        "pkg:npm/jsx-ast-utils@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-react@7.1.0",
      "dependsOn": [
        "pkg:npm/doctrine@2.0.0",
        "pkg:npm/has@1.0.1",
        "pkg:npm/jsx-ast-utils@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/external-editor@2.0.4",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.18",
        "pkg:npm/jschardet@1.5.0",
        "pkg:npm/tmp@0.0.31"
      ]
    },
    {
      "ref": "pkg:npm/extract-text-webpack-plugin@2.1.2",
      "dependsOn": [
        "pkg:npm/async@2.5.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/schema-utils@0.3.0",
        "pkg:npm/webpack-sources@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastparse@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fb-watchman@2.0.0",
      "dependsOn": [
        "pkg:npm/bser@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/figures@2.0.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/file-loader@0.11.2",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/filesize@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filled-array@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/flatten@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@3.0.1",
        "pkg:npm/universalify@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@0.30.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@2.4.0",
        "pkg:npm/klaw@1.3.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.1.2",
      "dependsOn": [
        "pkg:npm/nan@2.6.2",
        "pkg:npm/node-pre-gyp@0.6.36"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gh-pages@1.0.0",
      "dependsOn": [
        "pkg:npm/async@2.1.4",
        "pkg:npm/base64url@2.0.0",
        "pkg:npm/commander@2.9.0",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/globby@6.1.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/globby@6.1.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/got@5.7.1",
      "dependsOn": [
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-retry-allowed@1.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.0",
        "pkg:npm/node-status-codes@1.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/read-all-stream@3.1.0",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/timed-out@3.1.3",
        "pkg:npm/unzip-response@1.0.2",
        "pkg:npm/url-parse-lax@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gzip-size@3.0.0",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/handle-thing@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hpack.js@2.1.6",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/obuf@1.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/wbuf@1.7.2"
      ]
    },
    {
      "ref": "pkg:npm/html-comment-regex@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-entities@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-minifier@3.5.3",
      "dependsOn": [
        "pkg:npm/camel-case@3.0.0",
        "pkg:npm/clean-css@4.1.7",
        "pkg:npm/commander@2.11.0",
        "pkg:npm/he@1.1.1",
        "pkg:npm/ncname@1.0.0",
        "pkg:npm/param-case@2.1.1",
        "pkg:npm/relateurl@0.2.7",
        "pkg:npm/uglify-js@3.0.26"
      ]
    },
    {
      "ref": "pkg:npm/html-webpack-plugin@2.29.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.0",
        "pkg:npm/html-minifier@3.5.3",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/pretty-error@2.1.1",
        "pkg:npm/toposort@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.1.0",
        "pkg:npm/domutils@1.1.6",
        "pkg:npm/readable-stream@1.0.34"
      ]
    },
    {
      "ref": "pkg:npm/http-deceiver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/icss-replace-symbols@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/icss-utils@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@2.1.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/indexes-of@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@3.1.1",
      "dependsOn": [
        "pkg:npm/ansi-escapes@2.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-cursor@2.1.0",
        "pkg:npm/cli-width@2.1.0",
        "pkg:npm/external-editor@2.0.4",
        "pkg:npm/figures@2.0.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/mute-stream@0.0.7",
        "pkg:npm/run-async@2.3.0",
        "pkg:npm/rx-lite-aggregates@4.0.8",
        "pkg:npm/rx-lite@4.0.8",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/internal-ip@1.2.0",
      "dependsOn": [
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/ip@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-absolute-url@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-directory@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-npm@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-redirect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-root@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-svg@2.1.0",
      "dependsOn": [
        "pkg:npm/html-comment-regex@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-wsl@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-changed-files@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-cli@20.0.4",
      "dependsOn": [
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/callsites@2.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/is-ci@1.0.10",
        "pkg:npm/istanbul-api@1.1.11",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-instrument@1.7.4",
        "pkg:npm/istanbul-lib-source-maps@1.2.1",
        "pkg:npm/jest-changed-files@20.0.3",
        "pkg:npm/jest-config@20.0.4",
        "pkg:npm/jest-docblock@20.0.3",
        "pkg:npm/jest-environment-jsdom@20.0.3",
        "pkg:npm/jest-haste-map@20.0.5",
        "pkg:npm/jest-jasmine2@20.0.4",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve-dependencies@20.0.3",
        "pkg:npm/jest-runtime@20.0.4",
        "pkg:npm/jest-snapshot@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/node-notifier@5.1.2",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/string-length@1.0.1",
        "pkg:npm/throat@3.2.0",
        "pkg:npm/which@1.2.14",
        "pkg:npm/worker-farm@1.4.1",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-config@20.0.4",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/jest-environment-jsdom@20.0.3",
        "pkg:npm/jest-environment-node@20.0.3",
        "pkg:npm/jest-jasmine2@20.0.4",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve@20.0.4",
        "pkg:npm/jest-validate@20.0.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-diff@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/diff@3.3.0",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-docblock@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-environment-jsdom@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/jsdom@9.12.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-node@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-haste-map@20.0.5",
      "dependsOn": [
        "pkg:npm/fb-watchman@2.0.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-docblock@20.0.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/sane@1.6.0",
        "pkg:npm/worker-farm@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-jasmine2@20.0.4",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-matchers@20.0.3",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-snapshot@20.0.3",
        "pkg:npm/once@1.4.0",
        "pkg:npm/p-map@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-matcher-utils@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-matchers@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-message-util@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/slash@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-mock@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-regex-util@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-regex-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve@20.0.4",
      "dependsOn": [
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/resolve@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-runtime@20.0.4",
      "dependsOn": [
        "pkg:npm/babel-core@6.25.0",
        "pkg:npm/babel-jest@20.0.3",
        "pkg:npm/babel-plugin-istanbul@4.1.4",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-config@20.0.4",
        "pkg:npm/jest-haste-map@20.0.5",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve@20.0.4",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-snapshot@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-util@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-validate@20.0.3",
        "pkg:npm/leven@2.1.0",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-validate@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/leven@2.1.0",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest@20.0.4",
      "dependsOn": [
        "pkg:npm/jest-cli@20.0.4"
      ]
    },
    {
      "ref": "pkg:npm/js-base64@2.1.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.7.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/esprima@2.7.3"
      ]
    },
    {
      "ref": "pkg:npm/jschardet@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@2.4.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/jsx-ast-utils@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/klaw@1.3.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@2.0.0",
      "dependsOn": [
        "pkg:npm/package-json@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/lazy-req@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/leven@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-fs-cache@1.0.1",
      "dependsOn": [
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/loader-utils@1.1.0",
      "dependsOn": [
        "pkg:npm/big.js@3.1.3",
        "pkg:npm/emojis-list@2.1.0",
        "pkg:npm/json5@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.camelcase@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.cond@4.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.defaults@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.memoize@4.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.template@4.4.0",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.templatesettings@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@4.1.0",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.uniq@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loud-rejection@1.6.0",
      "dependsOn": [
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/lower-case@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lowercase-keys@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/macaddress@0.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/math-expression-evaluator@1.2.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@3.7.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.29.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimic-fn@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.0.3",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multicast-dns@6.1.1",
      "dependsOn": [
        "pkg:npm/dns-packet@1.1.1",
        "pkg:npm/thunky@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ncname@1.0.0",
      "dependsOn": [
        "pkg:npm/xml-char-classes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/no-case@2.3.1",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/node-forge@0.6.33",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-notifier@5.1.2",
      "dependsOn": [
        "pkg:npm/growly@1.3.0",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/shellwords@0.1.0",
        "pkg:npm/which@1.2.14"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.6.36",
      "dependsOn": [
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npmlog@4.1.2",
        "pkg:npm/rc@1.2.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/tar-pack@3.4.0",
        "pkg:npm/tar@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/node-status-codes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-range@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-url@1.9.1",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prepend-http@1.0.4",
        "pkg:npm/query-string@4.3.4",
        "pkg:npm/sort-keys@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/npmlog@4.1.2",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/num2fraction@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-hash@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/obuf@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@2.0.1",
      "dependsOn": [
        "pkg:npm/mimic-fn@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/opn@4.0.2",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/opn@5.1.0",
      "dependsOn": [
        "pkg:npm/is-wsl@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-limit@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-map@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/package-json@2.4.0",
      "dependsOn": [
        "pkg:npm/got@5.7.1",
        "pkg:npm/registry-auth-token@3.3.1",
        "pkg:npm/registry-url@3.1.0",
        "pkg:npm/semver@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/param-case@2.1.1",
      "dependsOn": [
        "pkg:npm/no-case@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@1.7.0",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-up@1.0.0",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/portfinder@1.0.13",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-calc@5.3.1",
      "dependsOn": [
        "pkg:npm/postcss-message-helpers@2.0.0",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/reduce-css-calc@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-colormin@2.2.2",
      "dependsOn": [
        "pkg:npm/colormin@1.1.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-convert-values@2.6.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-comments@2.0.4",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-empty@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-overridden@0.1.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-unused@2.2.3",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-filter-plugins@2.0.2",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/uniqid@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-flexbugs-fixes@3.0.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-config@1.2.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-load-options@1.2.0",
        "pkg:npm/postcss-load-plugins@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-options@1.2.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-plugins@2.3.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-loader@2.0.6",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/postcss-load-config@1.2.0",
        "pkg:npm/postcss@6.0.8",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-idents@2.1.7",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-longhand@2.0.2",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-rules@2.1.2",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-api@1.6.1",
        "pkg:npm/postcss-selector-parser@2.2.3",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/vendors@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-message-helpers@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-minify-font-values@1.0.5",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-gradients@1.0.5",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-params@1.2.2",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-selectors@2.1.1",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-selector-parser@2.2.3",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-extract-imports@1.2.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "dependsOn": [
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-scope@1.1.0",
      "dependsOn": [
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-values@1.3.0",
      "dependsOn": [
        "pkg:npm/icss-replace-symbols@1.1.0",
        "pkg:npm/postcss@6.0.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-charset@1.1.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-url@3.0.8",
      "dependsOn": [
        "pkg:npm/is-absolute-url@2.1.0",
        "pkg:npm/normalize-url@1.9.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-ordered-values@2.2.3",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-idents@2.4.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-initial@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17"
      ]
    },
    {
      "ref": "pkg:npm/postcss-selector-parser@2.2.3",
      "dependsOn": [
        "pkg:npm/flatten@1.0.2",
        "pkg:npm/indexes-of@1.0.1",
        "pkg:npm/uniq@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-svgo@2.1.6",
      "dependsOn": [
        "pkg:npm/is-svg@2.1.0",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/svgo@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-unique-selectors@2.0.2",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-value-parser@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-zindex@2.2.0",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss@5.2.17",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss@5.2.17",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/js-base64@2.1.9",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/supports-color@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss@6.0.8",
      "dependsOn": [
        "pkg:npm/chalk@2.0.1",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/supports-color@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/prepend-http@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-bytes@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-error@2.1.1",
      "dependsOn": [
        "pkg:npm/renderkid@2.0.1",
        "pkg:npm/utila@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-format@20.0.3",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/ansi-styles@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/q@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/query-string@4.3.4",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/strict-uri-encode@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/react-dev-utils@3.0.2",
      "dependsOn": [
        "pkg:npm/address@1.0.2",
        "pkg:npm/anser@1.4.1",
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cross-spawn@4.0.2",
        "pkg:npm/detect-port-alt@1.1.3",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/filesize@3.3.0",
        "pkg:npm/gzip-size@3.0.0",
        "pkg:npm/html-entities@1.2.1",
        "pkg:npm/inquirer@3.1.1",
        "pkg:npm/is-root@1.0.0",
        "pkg:npm/opn@5.1.0",
        "pkg:npm/recursive-readdir@2.2.1",
        "pkg:npm/shell-quote@1.6.1",
        "pkg:npm/sockjs-client@1.1.4",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/react-error-overlay@1.0.9",
      "dependsOn": [
        "pkg:npm/anser@1.2.5",
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/react-dev-utils@3.0.2",
        "pkg:npm/settle-promise@1.0.0",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/react-onclickoutside@5.11.1",
      "dependsOn": [
        "pkg:npm/create-react-class@15.6.0"
      ]
    },
    {
      "ref": "pkg:npm/read-all-stream@3.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/recursive-readdir@2.2.1",
      "dependsOn": [
        "pkg:npm/minimatch@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/redent@1.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/reduce-css-calc@1.3.0",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2",
        "pkg:npm/math-expression-evaluator@1.2.17",
        "pkg:npm/reduce-function-call@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/reduce-function-call@1.0.2",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/regexpu-core@1.0.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.3.2",
        "pkg:npm/regjsgen@0.2.0",
        "pkg:npm/regjsparser@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@3.3.1",
      "dependsOn": [
        "pkg:npm/rc@1.2.1",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@3.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/relateurl@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/renderkid@2.0.1",
      "dependsOn": [
        "pkg:npm/css-select@1.2.0",
        "pkg:npm/dom-converter@0.1.4",
        "pkg:npm/htmlparser2@3.3.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/utila@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/require-from-string@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/restore-cursor@2.0.0",
      "dependsOn": [
        "pkg:npm/onetime@2.0.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/run-async@2.3.0",
      "dependsOn": [
        "pkg:npm/is-promise@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/rx-lite-aggregates@4.0.8",
      "dependsOn": [
        "pkg:npm/rx-lite@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/rx-lite@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sane@1.6.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.0",
        "pkg:npm/exec-sh@0.2.0",
        "pkg:npm/fb-watchman@1.9.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/walker@1.0.7",
        "pkg:npm/watch@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@0.3.0",
      "dependsOn": [
        "pkg:npm/ajv@5.2.2"
      ]
    },
    {
      "ref": "pkg:npm/select-hose@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/selfsigned@1.9.1",
      "dependsOn": [
        "pkg:npm/node-forge@0.6.33"
      ]
    },
    {
      "ref": "pkg:npm/semver-diff@2.1.0",
      "dependsOn": [
        "pkg:npm/semver@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/settle-promise@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shell-quote@1.6.1",
      "dependsOn": [
        "pkg:npm/array-filter@0.0.1",
        "pkg:npm/array-map@0.0.0",
        "pkg:npm/array-reduce@0.0.0",
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/slide@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sockjs-client@1.1.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/eventsource@0.1.6",
        "pkg:npm/faye-websocket@0.11.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/url-parse@1.1.9"
      ]
    },
    {
      "ref": "pkg:npm/sort-keys@1.1.2",
      "dependsOn": [
        "pkg:npm/is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdy-transport@2.0.20",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/detect-node@2.0.3",
        "pkg:npm/hpack.js@2.1.6",
        "pkg:npm/obuf@1.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/wbuf@1.7.2"
      ]
    },
    {
      "ref": "pkg:npm/spdy@3.4.7",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/handle-thing@1.2.5",
        "pkg:npm/http-deceiver@1.2.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/select-hose@2.0.0",
        "pkg:npm/spdy-transport@2.0.20"
      ]
    },
    {
      "ref": "pkg:npm/strict-uri-encode@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-length@1.0.1",
      "dependsOn": [
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-indent@1.0.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/style-loader@0.18.2",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@4.2.1",
      "dependsOn": [
        "pkg:npm/has-flag@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/svgo@0.7.2",
      "dependsOn": [
        "pkg:npm/coa@1.0.4",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/csso@2.3.2",
        "pkg:npm/js-yaml@3.7.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/whet.extend@0.9.9"
      ]
    },
    {
      "ref": "pkg:npm/sw-precache-webpack-plugin@0.11.3",
      "dependsOn": [
        "pkg:npm/del@2.2.2",
        "pkg:npm/sw-precache@5.2.0",
        "pkg:npm/uglify-js@3.0.26"
      ]
    },
    {
      "ref": "pkg:npm/sw-precache@5.2.0",
      "dependsOn": [
        "pkg:npm/dom-urls@1.1.0",
        "pkg:npm/es6-promise@4.1.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/lodash.defaults@4.2.0",
        "pkg:npm/lodash.template@4.4.0",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pretty-bytes@4.0.2",
        "pkg:npm/sw-toolbox@3.6.0",
        "pkg:npm/update-notifier@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/sw-toolbox@3.6.0",
      "dependsOn": [
        "pkg:npm/path-to-regexp@1.7.0",
        "pkg:npm/serviceworker-cache-polyfill@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/test-exclude@4.1.1",
      "dependsOn": [
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-main-filename@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/thunky@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timed-out@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.31",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/toposort@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/trim-newlines@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@3.0.26",
      "dependsOn": [
        "pkg:npm/commander@2.11.0",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/uniq@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uniqid@4.1.1",
      "dependsOn": [
        "pkg:npm/macaddress@0.2.8"
      ]
    },
    {
      "ref": "pkg:npm/uniqs@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unzip-response@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/update-notifier@1.0.3",
      "dependsOn": [
        "pkg:npm/boxen@0.6.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/configstore@2.1.0",
        "pkg:npm/is-npm@1.0.0",
        "pkg:npm/latest-version@2.0.0",
        "pkg:npm/lazy-req@1.1.0",
        "pkg:npm/semver-diff@2.1.0",
        "pkg:npm/xdg-basedir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urijs@1.18.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-loader@0.5.9",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/mime@1.3.6"
      ]
    },
    {
      "ref": "pkg:npm/url-parse-lax@1.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/utila@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utila@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vendors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wbuf@1.7.2",
      "dependsOn": [
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-server@2.5.0",
      "dependsOn": [
        "pkg:npm/ansi-html@0.0.7",
        "pkg:npm/bonjour@3.5.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/compression@1.7.0",
        "pkg:npm/connect-history-api-fallback@1.3.0",
        "pkg:npm/del@3.0.0",
        "pkg:npm/express@4.15.3",
        "pkg:npm/html-entities@1.2.1",
        "pkg:npm/http-proxy-middleware@0.17.4",
        "pkg:npm/internal-ip@1.2.0",
        "pkg:npm/opn@4.0.2",
        "pkg:npm/portfinder@1.0.13",
        "pkg:npm/selfsigned@1.9.1",
        "pkg:npm/serve-index@1.9.0",
        "pkg:npm/sockjs-client@1.1.2",
        "pkg:npm/sockjs@0.3.18",
        "pkg:npm/spdy@3.4.7",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/webpack-dev-middleware@1.11.0",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-manifest-plugin@1.1.0",
      "dependsOn": [
        "pkg:npm/fs-extra@0.30.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/webpack-sources@0.2.3",
      "dependsOn": [
        "pkg:npm/source-list-map@1.1.2",
        "pkg:npm/source-map@0.5.6"
      ]
    },
    {
      "ref": "pkg:npm/webpack@2.6.1",
      "dependsOn": [
        "pkg:npm/acorn-dynamic-import@2.0.2",
        "pkg:npm/acorn@5.1.1",
        "pkg:npm/ajv-keywords@1.5.1",
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/async@2.5.0",
        "pkg:npm/enhanced-resolve@3.4.1",
        "pkg:npm/interpret@1.0.3",
        "pkg:npm/json-loader@0.5.7",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/loader-runner@2.3.0",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/node-libs-browser@2.0.0",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/supports-color@3.2.3",
        "pkg:npm/tapable@0.2.7",
        "pkg:npm/uglify-js@2.8.29",
        "pkg:npm/watchpack@1.4.0",
        "pkg:npm/webpack-sources@0.2.3",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/whet.extend@0.9.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/widest-line@1.0.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/write-file-atomic@1.3.4",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/slide@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/xdg-basedir@2.0.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xml-char-classes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@5.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@7.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@5.0.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/react-datetime@2.16.3"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-21T17:41:02Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'react-datetime' with version '2.16.3'. The application also has 1 child modules/components. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 3 source files."
    }
  ]
}