{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:a70fc3aa-e9fa-413e-8c9a-15f1b8a326ce",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-20T09:46:49Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "request",
      "group": "",
      "version": "2.40.0-tuxcare.1",
      "description": "Simplified HTTP request client.",
      "purl": "pkg:npm/request@2.40.0-tuxcare.1",
      "bom-ref": "pkg:npm/request@2.40.0-tuxcare.1",
      "author": "Mikeal Rogers <mikeal.rogers@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/request.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "qs",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b47b8e3fd4cdff55660ccff2940a462b5405dcf4883fc23a6c70c47e828d41e56244443fb1fbb56c052b0358680ee9fca7c4e99bb8dcb33e3b83edcf886a1876"
        }
      ],
      "purl": "pkg:npm/qs@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "qs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "request.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30d50f7577c34b5a6024d72f279c33299665af934310fdf8e28e6cdd3c122808d1c4a02af77405ae21266790436d839d4e5c91b329453d9f2bd9b89b44c07f9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "json-stringify-safe"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "request.js",
            "line": 20
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79c85fbad8ffb794a84cbe16669aa30350c2b9dd573b4590177fc6278f1806673864c8422bbed003a67fc3a55340444b2ae27876bcdede4c364d44fcc595d537"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mime-types"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "request.js",
            "line": 18
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.5.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c31b911fd03a1bfc9b19531525b493a19bf63d9a5b5e004fb8eb2dccf51073fd177741510d27be5a19184de7ac9e91351ba1a04891df0a5565f636317afbdd4"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.5.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "forever-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "request.js",
            "line": 23
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-uuid",
      "version": "1.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca58b56afe0282eb4a72a8ad37c20b5bd94cc4eaec18916b872e63970718e462d8c42dddb0ccaf98a24e7f6672e7908ad9ef7d8107d59e1b7aedbead9807620d"
        }
      ],
      "purl": "pkg:npm/node-uuid@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/node-uuid/-/node-uuid-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/node-uuid/-/node-uuid-1.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use uuid module instead"
        },
        {
          "name": "ImportedModules",
          "value": "node-uuid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "request.js",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "0.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa07783e494d26cc73bb536836384645f399679965343e95b50646b9a0d7766234222efd579f9809adac2f1f10ea562160ddbef5fac2cd4c0e2d0a6ec07bcee1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@0.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-0.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@0.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-0.12.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7503779d1fdb02b03dc366b831d931b91b6720be6798a8796039c3d8500df6d7393924cc6489a84b8d9d2380a778826628408ba40ae24a88e0e67665a9bca0a1"
        }
      ],
      "purl": "pkg:npm/punycode@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7c784fa7cc5b40300d186254b17ff421ababcfd5ff304a867b030d46b9cb41726b9d08db935269b1e394df1299726fa723b193bf8ef87afb5569667db87b3fb"
        }
      ],
      "purl": "pkg:npm/form-data@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d0277322a660870080413057eeda36927ad9de3ab5db4b2caa794dcda1df3aee834ea52fa2f45126b393d68233314a00726d17f621554bb6bd587eb0cefa892"
        }
      ],
      "purl": "pkg:npm/async@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/async/-/async-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/async/-/async-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6289b1929675fd8c8cb3f45d1e4a06a86b3915a3eefea504cf4bd8099ab3fd15cc826b1c5a2116fc38b8aed67607c437851535a490b19efdb92f65dce1cdafa"
        }
      ],
      "purl": "pkg:npm/combined-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfeeee05dd69a9ee58b603da70821b67c1ee1de2c554d7b89941321435cbe8a8aacc4ca48dbc3ee665d95e918580d55ab1d2f88d62a068a217ac41e2ca73752c"
        }
      ],
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62c6b617f9ea4cd1878619bd315f2eadee3e1dcf98f005a2a94747c6c3bbc6ef3373dd8d0fd7f792900b1e368fd36e85b75ed47f1accb7de5ce743cb51eca707"
        }
      ],
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime/-/mime-1.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime/-/mime-1.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "306a573eb63932f0b7c28ed396cb01754bb1db8e6f70ca6fdf533f69f18dda2c120ef8c182bf8029a80f9f2731419aaa7b345966be5deab4076839b095ab8c46"
        }
      ],
      "purl": "pkg:npm/http-signature@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "161f738771b6999f2a33f930b222b02f65361665f156c6e83f8c759978e784a1efdd29b368166862fc44409cff612da09c281df319405567199d0c82f6a641b0"
        }
      ],
      "purl": "pkg:npm/asn1@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05b255f07aba82b613a249078bfa8a4b7e247d8205629bb8c0a77f1f474046c6baa8ea84147d706e8c4cc2b71c026163c918e47a68c495a542fec65250cc479c"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctype",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0be09b58b4a4d3174f729edebe8d98105d28f122ca703090b30fff69c732adff3f340598ce652198bf19892a24beec30310d3c44ad7453da6445ccb2f04980e4"
        }
      ],
      "purl": "pkg:npm/ctype@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ctype/-/ctype-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctype@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ctype/-/ctype-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ebdf54a1e459caf582a6ef14d43f20ccb0d3af32a9150cd0f4cef2bf5a08fbfc7f6af26a727b4a86da7573ae7b2f2e172c5f90eda970f495ad24b3aae43c219"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2a517d033398fb68f58f0a7a5679b8b23488f6c22348f3b6719ce3281afd1a1384c6941cb637ee6259ce9d43f34e2996810f65ba3d5cfc8ed386916cd20b910"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/qs@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-uuid@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@0.12.1",
      "dependsOn": [
        "pkg:npm/punycode@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/async@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@0.0.5",
      "dependsOn": [
        "pkg:npm/delayed-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.1.4",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/combined-stream@0.0.5",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctype@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@0.10.0",
      "dependsOn": [
        "pkg:npm/asn1@0.1.11",
        "pkg:npm/assert-plus@0.1.2",
        "pkg:npm/ctype@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.40.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/http-signature@0.10.0",
        "pkg:npm/json-stringify-safe@5.0.0",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.1",
        "pkg:npm/oauth-sign@0.3.0",
        "pkg:npm/qs@1.0.2",
        "pkg:npm/tough-cookie@0.12.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/request@2.40.0-tuxcare.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-20T09:46:49Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, October 20, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'request' with version '2.40.0-tuxcare.1'."
    }
  ]
}