{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f6614792-9455-479a-b9c9-ed3d95671591",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-23T15:14:13Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "deno.ns",
      "group": "",
      "version": "0.5.0",
      "description": "Deno namespace shim for Node.js",
      "purl": "pkg:npm/deno.ns@0.5.0",
      "bom-ref": "pkg:npm/deno.ns@0.5.0",
      "author": "Thomas Rory Gummerson <thomas@gummerson.no> (https://trgwii.no/)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "denolib, build, prepare, lint, fmt, clean, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/denoland/deno.ns.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@cspotcode\\n@fromdeno\\n@tsconfig\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "undici",
      "version": "4.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4a9a9869e1233055b49abb3f711f8831b749b7b0b1ace6a447b3f5d882378eddb352b7a86ca4366a32133cf844eef729c1e5babd7ba9a7c1c0f3f8d54243751"
        }
      ],
      "purl": "pkg:npm/undici@4.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undici/-/undici-4.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici@4.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undici/-/undici-4.5.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "undici,fetch,undici/fetch,File,undici/File,FormData,undici/FormData,Headers,undici/Headers,Request,undici/Request,Response,undici/Response"
        },
        {
          "name": "ImportedModules",
          "value": "undici"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 28
          },
          {
            "location": "src/index.ts",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "@fromdeno",
      "name": "test",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5602d388423eadabe73187cb485cf3d04879d401a9c2d34ed89656ac334866598b0c7d7ac001a12ca57ea690a567f8758e51e1c804162797625338809b5d1258"
        }
      ],
      "purl": "pkg:npm/%40fromdeno/test@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@fromdeno/test/-/test-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fromdeno/test@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@fromdeno/test/-/test-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/fdt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "fdt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mri",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b73cec91bddb1bc2ef606145fe60d3a6ade3a48e90f707372c49816a086ef83742b2c77515a90dec17348553661321aad5bab74607e409bddc9902e934f3aba0"
        }
      ],
      "purl": "pkg:npm/mri@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mri@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.4.13",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cb2faf6c2ad776e70ee9d67be0f698a013882d295a464cfa230452cc9061d7b9481aa76b0ba90b76a949ea9950837f31942f40d13593fed69ac86496cc7805e"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.4.13.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-node",
      "version": "10.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8429f23b2b86983e701e578e417e8d22326d61520ef1b3cff05d9a716901e16d3ac1d964832bc9b6e6cefc8f4d908f3c84214409bb048282dcd153646267127f"
        }
      ],
      "purl": "pkg:npm/ts-node@10.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ts-node/-/ts-node-10.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-node@10.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ts-node/-/ts-node-10.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/ts-node, /app/node_modules/.bin/ts-node-cwd, /app/node_modules/.bin/ts-node-script, /app/node_modules/.bin/ts-node-transpile-only, /app/node_modules/.bin/ts-script"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ts-node, ts-node-cwd, ts-node-script, ts-node-transpile-only, ts-script"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e317ec7298ac560aaa0df3da268e6f91df9077f22d9286a09c7a6e7ebfa2d9008706c358a7e1bb500a32165f1a3edc7cefdbb7f303d5eb9ad9f2a6c66628da94"
        }
      ],
      "purl": "pkg:npm/typescript@4.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.4.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@cspotcode",
      "name": "source-map-support",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7dd9f93e5db75a1c9263dda1b252fc502c40f5b85784ab584843da26104f609bdad42c88c9d8c6b7141fd072fd9dc1fafd12e4b301910b55fd73816e92c43a"
        }
      ],
      "purl": "pkg:npm/%40cspotcode/source-map-support@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@cspotcode/source-map-support@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@cspotcode",
      "name": "source-map-consumer",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e35aa7887cd353cc8019b0a9d38a219664ab65ff1b91ffe226c9775747511ac40dff91857f1f8b6c24ac0a9a7682aaea8d3560fcae8ef32728577e4923003302"
        }
      ],
      "purl": "pkg:npm/%40cspotcode/source-map-consumer@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@cspotcode/source-map-consumer/-/source-map-consumer-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@cspotcode/source-map-consumer@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@cspotcode/source-map-consumer/-/source-map-consumer-0.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node10",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9715f49098c82ad0214b63532c940fc23d47e120bf75f4cd6b32c6b994fd8fd3decdd96775b125f4b71d6ee2894cd7a7cb361b4766946179d649a61349aa666"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node10@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node10@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node12",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff204c71e9be7dbbe1491107facd786098b5f2ca7b27d8e9ba1601c800d3dabca97da8cc659378590eb30468012a9e7734a9aa237eb01580dbdf268c3eeac84f"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node12@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tsconfig/node12/-/node12-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node12@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tsconfig/node12/-/node12-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node14",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e74f6bdbec804457c71c4ed3e8fbaeda38e4a3271fb68be15d1a96df6f0f0d74d518a8a195bd4ff19f663191f4e1e6f26a37d163b75e75f1b29e5ac51c95100a"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node14@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tsconfig/node14/-/node14-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node14@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tsconfig/node14/-/node14-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node16",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "799c656c8f0666c71a192ee491cfedac74d3e7182b8c7dffd67d890f0bac0bd89a84f296311bd18c94803799825ef8ae4c643f9479e1beff10d584e99dfcfd80"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node16@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tsconfig/node16/-/node16-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node16@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tsconfig/node16/-/node16-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c976d8785cbe8d4b98777fc20dc83636421813df755d85ff6e37bb2e68c98a051c89a78ed494785f15e0088575fd973f751b85132c352f4a5b03eab29c9916e5"
        }
      ],
      "purl": "pkg:npm/acorn@8.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "8.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93e8b21c4b8f812c3a49bb83a4640cfb4e874146b4e03677a3e17a092cd732fbc8e4a32f9da12a5def9855ee79e51f679fa18fb78d387e8b38c1c829c35d920c"
        }
      ],
      "purl": "pkg:npm/acorn-walk@8.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@8.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arg",
      "version": "4.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c4bd403a86d17c76ed8c0f4adf5f2718af8d8978df6602c1f0cc7d9fbbd5102a52b65e7fb2eb2906772c72cec024b814b341a653f9df7671f3de5278e087bc"
        }
      ],
      "purl": "pkg:npm/arg@4.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arg/-/arg-4.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arg@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arg/-/arg-4.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-require",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c2855f78e7d0ca486978e2b2846f7b12095442b36aaef3dab64ac5ff8c4abf5391d9879ac5389b695c2e88eb8ff14797c9a4e55c4c99803e7ed4643ffde829"
        }
      ],
      "purl": "pkg:npm/create-require@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-require@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-error",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3c52194d7bbbcf2a8990842d6a15e94ca24aff49cdc080d6eca379fbe2654f0392d3670901f4d9577f85cf6a62f1244f21d2087bdeb33de31bf0453d825489f"
        }
      ],
      "purl": "pkg:npm/make-error@1.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-error/-/make-error-1.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-error@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-error/-/make-error-1.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yn",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "531e328065acbb673b8ac1567bc62ed5896e266a95871a8ad9c2d735003901c0b741f6c636933b7eed18f1bff3d7aa572e7171658bd685dddf84163d0cb982e9"
        }
      ],
      "purl": "pkg:npm/yn@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yn/-/yn-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yn@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yn/-/yn-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/undici@4.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mri@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@fromdeno/test@0.1.5",
      "dependsOn": [
        "pkg:npm/mri@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@16.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typescript@4.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@cspotcode/source-map-consumer@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@cspotcode/source-map-support@0.6.1",
      "dependsOn": [
        "pkg:npm/@cspotcode/source-map-consumer@0.8.0"
      ]
    },
    {
      "ref": "pkg:npm/@tsconfig/node10@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node12@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node14@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node16@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@8.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-walk@8.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arg@4.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-require@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-error@1.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yn@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ts-node@10.2.1",
      "dependsOn": [
        "pkg:npm/@cspotcode/source-map-support@0.6.1",
        "pkg:npm/@tsconfig/node10@1.0.8",
        "pkg:npm/@tsconfig/node12@1.0.9",
        "pkg:npm/@tsconfig/node14@1.0.1",
        "pkg:npm/@tsconfig/node16@1.0.2",
        "pkg:npm/@types/node@16.4.13",
        "pkg:npm/acorn-walk@8.2.0",
        "pkg:npm/acorn@8.5.0",
        "pkg:npm/arg@4.1.3",
        "pkg:npm/create-require@1.1.1",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/make-error@1.3.6",
        "pkg:npm/typescript@4.4.3",
        "pkg:npm/yn@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/deno.ns@0.5.0",
      "dependsOn": [
        "pkg:npm/@fromdeno/test@0.1.5",
        "pkg:npm/@types/node@16.4.13",
        "pkg:npm/ts-node@10.2.1",
        "pkg:npm/typescript@4.4.3",
        "pkg:npm/undici@4.5.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/deno.ns@0.5.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-23T15:14:13Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, October 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'deno.ns' with version '0.5.0'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}