{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:5d162a24-e08d-45da-947e-56c3ebb1432a",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T16:56:47Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "cel",
      "group": "@bufbuild",
      "version": "0.6.2",
      "description": "A CEL evaluator for ECMAScript",
      "purl": "pkg:npm/%40bufbuild/cel@0.6.2",
      "bom-ref": "pkg:npm/@bufbuild/cel@0.6.2",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "generate, postgenerate, test, prebuild, build, build:cjs, build:esm, format, lint, attw, license-header"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:cjs, build:esm"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/bufbuild/cel-es.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@bufbuild\\n@peggyjs\\n@ts-morph"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@bufbuild",
      "name": "cel-spec",
      "version": "0.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "660b3aee0b554c8cef6b7e8834479359b93f52031158ac0d93890849a57706e107f90bfe1c30667e0197470487f7d5c2d562b1e0219fae35e73dd1fdda73383b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bufbuild/cel-spec@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bufbuild/cel-spec/-/cel-spec-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bufbuild/cel-spec@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bufbuild/cel-spec/-/cel-spec-0.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@bufbuild/cel-spec/cel/expr/syntax_pb.js,ExprSchema,@bufbuild/cel-spec/cel/expr/syntax_pb.js/ExprSchema,ParsedExprSchema,@bufbuild/cel-spec/cel/expr/syntax_pb.js/ParsedExprSchema,Constant,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Constant,Expr,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr,Expr_CreateStruct_Entry,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_CreateStruct_Entry,SourceInfo,@bufbuild/cel-spec/cel/expr/syntax_pb.js/SourceInfo,ParsedExpr,@bufbuild/cel-spec/cel/expr/syntax_pb.js/ParsedExpr,Expr_Ident,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_Ident,ConstantSchema,@bufbuild/cel-spec/cel/expr/syntax_pb.js/ConstantSchema,Expr_Call,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_Call,Expr_Comprehension,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_Comprehension,Expr_CreateList,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_CreateList,Expr_CreateStruct,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_CreateStruct,Expr_Select,@bufbuild/cel-spec/cel/expr/syntax_pb.js/Expr_Select,@bufbuild/cel-spec/cel/expr/checked_pb.js,CheckedExprSchema,@bufbuild/cel-spec/cel/expr/checked_pb.js/CheckedExprSchema,Type_PrimitiveType,@bufbuild/cel-spec/cel/expr/checked_pb.js/Type_PrimitiveType,CheckedExpr,@bufbuild/cel-spec/cel/expr/checked_pb.js/CheckedExpr,ReferenceSchema,@bufbuild/cel-spec/cel/expr/checked_pb.js/ReferenceSchema,Type,@bufbuild/cel-spec/cel/expr/checked_pb.js/Type,TypeSchema,@bufbuild/cel-spec/cel/expr/checked_pb.js/TypeSchema,Decl_IdentDecl,@bufbuild/cel-spec/cel/expr/checked_pb.js/Decl_IdentDecl,@bufbuild/cel-spec/cel/expr/value_pb.js,ValueSchema,@bufbuild/cel-spec/cel/expr/value_pb.js/ValueSchema,MapValue,@bufbuild/cel-spec/cel/expr/value_pb.js/MapValue,Value,@bufbuild/cel-spec/cel/expr/value_pb.js/Value,@bufbuild/cel-spec/testdata/registry.js,getTestRegistry,@bufbuild/cel-spec/testdata/registry.js/getTestRegistry,@bufbuild/cel-spec/testdata/to-debug-string.js,KindAdorner,@bufbuild/cel-spec/testdata/to-debug-string.js/KindAdorner,SemanticAdorner,@bufbuild/cel-spec/testdata/to-debug-string.js/SemanticAdorner,toDebugString,@bufbuild/cel-spec/testdata/to-debug-string.js/toDebugString,@bufbuild/cel-spec/testdata/tests.js,IncrementalTest,@bufbuild/cel-spec/testdata/tests.js/IncrementalTest,IncrementalTestSuite,@bufbuild/cel-spec/testdata/tests.js/IncrementalTestSuite,@bufbuild/cel-spec/cel/expr/conformance/test/simple_pb.js,SimpleTest,@bufbuild/cel-spec/cel/expr/conformance/test/simple_pb.js/SimpleTest"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/check.js",
            "line": 18
          },
          {
            "location": "dist/cjs/plan.js",
            "line": 18
          },
          {
            "location": "dist/esm/check.js",
            "line": 14
          },
          {
            "location": "dist/esm/plan.js",
            "line": 15
          },
          {
            "location": "src/builder.ts",
            "line": 20
          },
          {
            "location": "src/check.ts",
            "line": 20
          },
          {
            "location": "src/checker.ts",
            "line": 22
          },
          {
            "location": "src/logic-manager.ts",
            "line": 15
          },
          {
            "location": "src/parse.ts",
            "line": 18
          },
          {
            "location": "src/parser.ts",
            "line": 260
          },
          {
            "location": "src/plan.ts",
            "line": 24
          },
          {
            "location": "src/planner.ts",
            "line": 23
          },
          {
            "location": "src/unparse.ts",
            "line": 25
          },
          {
            "location": "dist/cjs/checker.js",
            "line": 18
          },
          {
            "location": "dist/cjs/plan.js",
            "line": 17
          },
          {
            "location": "dist/esm/checker.js",
            "line": 14
          },
          {
            "location": "dist/esm/plan.js",
            "line": 14
          },
          {
            "location": "src/check.ts",
            "line": 15
          },
          {
            "location": "src/checker.ts",
            "line": 30
          },
          {
            "location": "src/plan.ts",
            "line": 18
          },
          {
            "location": "src/testing.ts",
            "line": 70
          },
          {
            "location": "dist/cjs/testing.js",
            "line": 61
          },
          {
            "location": "dist/esm/testing.js",
            "line": 20
          },
          {
            "location": "src/testing.ts",
            "line": 33
          },
          {
            "location": "src/testing.ts",
            "line": 34
          },
          {
            "location": "dist/cjs/testing.js",
            "line": 71
          },
          {
            "location": "dist/esm/testing.js",
            "line": 30
          },
          {
            "location": "dist/esm/testing.js",
            "line": 34
          },
          {
            "location": "dist/esm/testing.js",
            "line": 80
          },
          {
            "location": "src/testing.ts",
            "line": 57
          },
          {
            "location": "src/testing.ts",
            "line": 79
          },
          {
            "location": "src/testing.ts",
            "line": 141
          },
          {
            "location": "dist/cjs/testing.js",
            "line": 72
          },
          {
            "location": "dist/esm/testing.js",
            "line": 31
          },
          {
            "location": "dist/esm/testing.js",
            "line": 69
          },
          {
            "location": "dist/esm/testing.js",
            "line": 103
          },
          {
            "location": "src/testing.ts",
            "line": 62
          },
          {
            "location": "src/testing.ts",
            "line": 127
          },
          {
            "location": "src/testing.ts",
            "line": 164
          },
          {
            "location": "src/testing.ts",
            "line": 56
          },
          {
            "location": "src/testing.ts",
            "line": 64
          }
        ]
      }
    },
    {
      "group": "@bufbuild",
      "name": "re2",
      "version": "0.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc9d1a28b07c8d94917bc3f987df3c186035e695ff41305c62f994cef49da922656a775c8710f16efca425fd515294786e00043377a86c7f2b6ab20dc3be1b09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bufbuild/re2@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bufbuild/re2/-/re2-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bufbuild/re2@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bufbuild/re2/-/re2-0.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@bufbuild/re2,RE2JS,@bufbuild/re2/RE2JS"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/std/logic.js",
            "line": 55
          },
          {
            "location": "dist/esm/std/logic.js",
            "line": 19
          },
          {
            "location": "dist/esm/std/logic.js",
            "line": 21
          },
          {
            "location": "src/std/logic.ts",
            "line": 29
          },
          {
            "location": "src/std/logic.ts",
            "line": 32
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expect-type",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29f61b9a9466d156cb8c4bd56bdc86c028bd188df8c6f8bb03f1d761640eeb90920f6bb731ccd4252bb05ca148c651ac801422cd5f6ae49f4d1e3e151b49fea4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expect-type@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expect-type@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "peggy",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e185bc07d4ca02abd60da9e0b69f56a9e98ccb48bd585205311a87a25dc9863a50184eac709a27cf27b80566d911fd2dbe29767a06427915fc9c4edabda0245"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/peggy@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/peggy/-/peggy-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peggy@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/peggy/-/peggy-5.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/cel/node_modules/.bin/peggy"
        },
        {
          "name": "cdx:npm:bin",
          "value": "peggy"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@peggyjs",
      "name": "from-mem",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26b4f284de55a362b72adcfe6d34e9b7bb9e2fa3d11bfd75c615bb05d48ad9368921bc52269464d744cb9fee1e04f4140adae441e60083432556b73d41930512"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40peggyjs/from-mem@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@peggyjs/from-mem/-/from-mem-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@peggyjs/from-mem@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@peggyjs/from-mem/-/from-mem-4.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.8.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f65a52494e0c972de6aedaeec0bb3578b2bafa0cdbcea78117044d8c88c4fbd2ee0e959d61cb6b4254377a3d489608bb8249e9b134673e82cff03a421ea1c827"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@7.8.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-7.8.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.8.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-7.8.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/cel/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "14.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fecb4268fd3d5167da8f3f8121d6991c41c2d1825ada25a48ba323ad1f1bba01aa648d6542cb64a2b75410e31dc39e0f2a0e54ac6447adee0e4fab4e8cbd383"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@14.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@14.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-generator",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c9052995b7b539d3e67e32285f3c92a1adb0000b4547ae235096e7c37e06a29107c098f724d39ae327d04ed8b5d369b03aeb8e2e9a1166dbe5d9f1a459c5391"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-generator@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-generator/-/source-map-generator-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-generator@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-generator/-/source-map-generator-2.0.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "peggy-ts",
      "version": "0.0.9",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/peggy-ts@0.0.9?vcs_url=git%2Bssh%3A//git%40github.com/hudlow/peggy-ts.git%239adcea0eadb89bea93cc6bece8a429e00df044e8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "git+ssh://git@github.com/hudlow/peggy-ts.git#9adcea0eadb89bea93cc6bece8a429e00df044e8"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peggy-ts@0.0.9?vcs_url=git+ssh://git@github.com/hudlow/peggy-ts.git#9adcea0eadb89bea93cc6bece8a429e00df044e8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "git+ssh://git@github.com/hudlow/peggy-ts.git#9adcea0eadb89bea93cc6bece8a429e00df044e8"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "git"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "github:hudlow/peggy-ts#v0.0.9"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-morph",
      "version": "27.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e152181e96372b759fbd0d9343d437b5d36f4fac4f9c32420fee8a2a90b453ad12d3a9c922d80b2db32266d2f44d6d36d508d27489d1a56c1adfa9ceff9c0f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ts-morph@27.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ts-morph/-/ts-morph-27.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-morph@27.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ts-morph/-/ts-morph-27.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ts-morph",
      "name": "common",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bbe2259fec82e9d5928d617639a9b75d35a9a5edef5279dbf996f53557c95fb658ad91cf4fab503e8e51f6de5b4381661e645144a86083d487acf61aaedcefa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ts-morph/common@0.28.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ts-morph/common/-/common-0.28.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ts-morph/common@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ts-morph/common/-/common-0.28.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "10.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be92d012cf952c2af59d4d015d2d3b99a628170943007d209e042ebadb71230bad0c510c1ead9b957fbcbe98310dd2b72753f08c22627a9efb3a2b536782e5d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@10.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@10.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "5.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "628bd0debce168b308ac38cd0cc90d4b4d6d79af77aa11211b9c72f1febe47497e770dca8bee6c0a822823de368ae2d94c75a881692d830543854d3d88d12299"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@5.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@5.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-browserify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fbba8d9409439865c9c5ff7203d25ba53898bf6da7f16b5c4f7bb64fb1a9a6052a634964248cdc65b7adf96064b632247d1a3bee5c2b73d9e9abde36eccfdf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyglobby",
      "version": "0.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1747f758a5ca8a99f5a911d66388a24ec023459dd0f40cc9eb5bf7188d51adb449017d581c2c51e836b963e3b9a339589cf72c8dbbae5a96c805e0d4324dada"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tinyglobby@0.2.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinyglobby@0.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b486d8b596ee70eb340511aa3c992c84951874bf920c7edd54cf208f2f84469dd60148cb105244fb4da46a7c87b708d63a7c2b298062c0098cd29e242c90275e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fdir@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fdir@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9c26ef3c436216a89b030f9dbd24a31dc069bf76f2275b81ef427470887f49b62849bf318eb1c0ed1c4df1d6904a794393cac43c91598b9c9da426eef285c18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-block-writer",
      "version": "13.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a87e8d29ab720a9ec16db87a9217b4ea05fafbd5a7b2643549d07a66a81ec504cdaa12280bd223ce35209948ef6913d7594c0c4035ee571c6f54cb460cbfc72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-block-writer@13.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/code-block-writer/-/code-block-writer-13.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-block-writer@13.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-block-writer/-/code-block-writer-13.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "re2js",
      "version": "2.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2484f76c4114653391d984b5c1a94d1087c7e1c17f710799701505abb95da8eea547a8345f9081abf4bcaec6bda26cd972c35ff2a737ea30a45a928ab6772b66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/re2js@2.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/re2js/-/re2js-2.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/re2js@2.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/re2js/-/re2js-2.9.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@bufbuild/cel-spec@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bufbuild/re2@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expect-type@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@7.8.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@peggyjs/from-mem@4.0.0",
      "dependsOn": [
        "pkg:npm/semver@7.8.6"
      ]
    },
    {
      "ref": "pkg:npm/commander@14.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-generator@2.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/peggy@5.1.1",
      "dependsOn": [
        "pkg:npm/@peggyjs/from-mem@4.0.0",
        "pkg:npm/commander@14.0.3",
        "pkg:npm/source-map-generator@2.0.7"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@4.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@5.0.12",
      "dependsOn": [
        "pkg:npm/balanced-match@4.0.4"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@10.2.6",
      "dependsOn": [
        "pkg:npm/brace-expansion@5.0.12"
      ]
    },
    {
      "ref": "pkg:npm/path-browserify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@6.5.0",
      "dependsOn": [
        "pkg:npm/picomatch@4.0.7"
      ]
    },
    {
      "ref": "pkg:npm/tinyglobby@0.2.17",
      "dependsOn": [
        "pkg:npm/fdir@6.5.0",
        "pkg:npm/picomatch@4.0.7"
      ]
    },
    {
      "ref": "pkg:npm/@ts-morph/common@0.28.1",
      "dependsOn": [
        "pkg:npm/minimatch@10.2.6",
        "pkg:npm/path-browserify@1.0.1",
        "pkg:npm/tinyglobby@0.2.17"
      ]
    },
    {
      "ref": "pkg:npm/code-block-writer@13.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ts-morph@27.0.2",
      "dependsOn": [
        "pkg:npm/@ts-morph/common@0.28.1",
        "pkg:npm/code-block-writer@13.0.3"
      ]
    },
    {
      "ref": "pkg:npm/peggy-ts@0.0.9?vcs_url=git+ssh://git@github.com/hudlow/peggy-ts.git#9adcea0eadb89bea93cc6bece8a429e00df044e8",
      "dependsOn": [
        "pkg:npm/peggy@5.1.1",
        "pkg:npm/source-map-generator@2.0.7",
        "pkg:npm/ts-morph@27.0.2"
      ]
    },
    {
      "ref": "pkg:npm/re2js@2.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bufbuild/cel@0.6.2",
      "dependsOn": [
        "pkg:npm/@bufbuild/cel-spec@0.6.2",
        "pkg:npm/@bufbuild/re2@0.6.2",
        "pkg:npm/expect-type@1.4.0",
        "pkg:npm/peggy@5.1.1",
        "pkg:npm/re2js@2.9.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@bufbuild/cel@0.6.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-04T16:56:47Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, November 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'cel' with version '0.6.2'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}