{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:76a11811-fd2e-45e4-8302-919c27fc6f66",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-08T02:50:36Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "deepmerge",
      "group": "@bundled-es-modules",
      "version": "4.3.2",
      "description": "mirror of deepmerge, bundled and exposed as ES module",
      "purl": "pkg:npm/%40bundled-es-modules/deepmerge@4.3.2",
      "bom-ref": "pkg:npm/@bundled-es-modules/deepmerge@4.3.2",
      "author": "Joren Broekema <joren.broekema@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "dev, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@esbuild"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "deepmerge",
      "version": "4.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dec52a6cc11cefb5eaa5d34eec547246883e796de987e19809b8feacafae63244cbb0b15cb4acc895b4f9fe40994a16f58fff53d8a5aa6a627d0c7b6927167f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deepmerge@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "deepmerge"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "source.js",
            "line": 1
          },
          {
            "location": "index.cjs",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.18.20",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71eab1a1e754adc6b287b63b657e8d75b6c3cc644e8b2541802e0fae225384129254f5a79c51d90247c8d65253f101643b01f8a8e4b6489912e30be91a5f01a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esbuild@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild/-/esbuild-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild/-/esbuild-0.18.20.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esbuild"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esbuild"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "esbuild"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/build.js",
            "line": 1
          },
          {
            "location": "scripts/build.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f28bb4c323f8a328a3594d424042a886e53ed88c95e09f391446a9868f5dc2e9d0aa7246412dd97887b6e4847b7fb7458ffb33bdff3c2ba03bc035a3aa3b94b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "373e2b25c721183b44355d1e30a50d6ba2f5db3cf6cc10d7ba18ff563875f331aa078e018bb3013125e382e9c98234610a628e8e73ee669e0c6fa38aaad3072d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f060dd95e3c903c0face5658255fe39eb4408baace88d6820bf25c95c5e907e288baf7c1378a302ed8336366ecc67c7aeba5e3271da40cf5269d3b51f2a29052"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-arm64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f14475b9907537f334b694f4cf3b2bb24e6f92f9ea1b3d49d336474911f01d758804725978c644fc0c1f5ddb4d3c0ed4db97bb896a0d87b84e4d6406609cd10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-arm64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5ce60c65303c739b9d77a8f19b09b0ee90e76c1ad2a17f10f5cc92978c209c53b8eee743bb31e019f1ce24ad225c388246151faac76d7230c558c2242fc93c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-arm64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caa0d01f2e101debe93006b186123060f32fd4d102c0ebc8a460999040a7f30d961475e3130ac19f709e34862c89b67f8991147a68fef8cdba5b770d47987e4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b605913cfb90b1ddd19816706ab1951d942fb737c404eade36ec4430a15c7790da0e7d8f6c1c5fc0b723e3e69e9e887b72d5dc6d798e4089fc1c8ea6092c3931"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff96c790c5a7ab51202abd55f986f3decd61597a24ee60c550c438706d7401f5b7c0bd363d2662e6416960aae9b43b206f6580248bd17039bea88bd77ff6a9be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d986ec705f942fb4900152299d6bd8c0cfb72ec9320e63e17b7d6913bfdaa1330528acc873d94b6f2194a6699bf1af008b138beb5b10fe6161de31231d816f74"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ia32",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f87ad5b0aba22c45e4f4135287538d1b3a7ccc1e81fbdda5e9f7a16cf13213eb3f47bbc1bafb44874b0f62da2b16ac3da76f1daaa39c94a800a075f546c7b4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ia32@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-loong64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d75bc9ea053acea432cf80f63db95fbfd438f1a10ec3a01d8df1ea1ccaaf08f57baa27b06200c0cc7fd9f5c5933d4e05b427ccebaae21bfc0eecdc126feeb8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-loong64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-mips64el",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77935e69765c1e9f0fcd8cb95675d5dd549dd83df6f196fef5d12ae4713a6f0ebe37ce8954f131ac0e8eebc38fc286e7b5b349d29cc2a541594e8df0d06c9eb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-mips64el@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ppc64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5873f279271135c9803672d092ae807f25d116be43e8ddac2a0905a3616a82e3f8e0dc367b20e56d3759c1df46624f7c0d91bd408b488939452c72478f13f714"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ppc64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-riscv64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "592c68ea1e5e708e571f7e0a0bbc39bde3672a48eedf30512c440d63b9afe66b419ab3ff32334108096c336bb98430654b7346713429a01bd1cea05c46da6ad4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-riscv64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-s390x",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fbcdb7d4632cde6004b61e896b588ad1ad6c437a217dca73a512c7f2eb9ce7f2950c59de1fa8ed0092c519a7e9ce93113ba0f327a02f5cacdef4b7c532b20755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-s390x@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "518aa2a9e9a984970db0512c91cef78d0ec1f638308d6ad26b2c5ac12e945456465ab000b64ce3c52aa7a1c9425f15ad7f02ddcd4faf4e970d621a67e37b8fd7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88ed5cfbe54feb150152696d1d9a0cb4251d3e59cf19d0689ba22b3b883228f1455412a2a08226568a11e48f379d37b0e54398ae4de020985b661f17e38cb4e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b97b8612b2e41f5f8731732830fd408f2043fac1b20bfac7b7b313dd0a231b14b056bb47a264e27b5a80fea6d08bae68d904ad5693b23a0ff23736095418ec6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "sunos-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9036c5445a746294d0555aea51de454d8996a38e7319a5ded17f04d46fcb2850b4bfcc74bd6ae139648b2137029fade59992317ce317b427ed8bf47137fd309d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/sunos-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-arm64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75d60547a22d620a1aab8bf8266410680239b3b9e9ced7d5e0083a36b862696d11ae7397a81920c192e87d54e5ab575a55340d86d239a22793be444f7d9ade3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-arm64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-ia32",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5afed0062dc80ffad1393d3c4800534bb795e215f6eac55dbaa0ce4ded4cbc632335ddc48cecf86fbcde7b1211eb61932042ab7c95ca2fd2c5c536209327aeee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-ia32@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-x64",
      "version": "0.18.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91375f45c4a20df41c6bfcbd408927834d9abc9f8d09a42facc7a396c077451bf9b04f6b4687813c849a6692b11c42f34716722ef36db353f6ed6df057ef2079"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-x64@0.18.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.18.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-x64@0.18.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.18.20.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/deepmerge@4.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-arm64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-arm64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ia32@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-loong64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-mips64el@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ppc64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-riscv64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-s390x@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/sunos-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-arm64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-ia32@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-x64@0.18.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.18.20",
      "dependsOn": [
        "pkg:npm/@esbuild/android-arm64@0.18.20",
        "pkg:npm/@esbuild/android-arm@0.18.20",
        "pkg:npm/@esbuild/android-x64@0.18.20",
        "pkg:npm/@esbuild/darwin-arm64@0.18.20",
        "pkg:npm/@esbuild/darwin-x64@0.18.20",
        "pkg:npm/@esbuild/freebsd-arm64@0.18.20",
        "pkg:npm/@esbuild/freebsd-x64@0.18.20",
        "pkg:npm/@esbuild/linux-arm64@0.18.20",
        "pkg:npm/@esbuild/linux-arm@0.18.20",
        "pkg:npm/@esbuild/linux-ia32@0.18.20",
        "pkg:npm/@esbuild/linux-loong64@0.18.20",
        "pkg:npm/@esbuild/linux-mips64el@0.18.20",
        "pkg:npm/@esbuild/linux-ppc64@0.18.20",
        "pkg:npm/@esbuild/linux-riscv64@0.18.20",
        "pkg:npm/@esbuild/linux-s390x@0.18.20",
        "pkg:npm/@esbuild/linux-x64@0.18.20",
        "pkg:npm/@esbuild/netbsd-x64@0.18.20",
        "pkg:npm/@esbuild/openbsd-x64@0.18.20",
        "pkg:npm/@esbuild/sunos-x64@0.18.20",
        "pkg:npm/@esbuild/win32-arm64@0.18.20",
        "pkg:npm/@esbuild/win32-ia32@0.18.20",
        "pkg:npm/@esbuild/win32-x64@0.18.20"
      ]
    },
    {
      "ref": "pkg:npm/@bundled-es-modules/deepmerge@4.3.2",
      "dependsOn": [
        "pkg:npm/deepmerge@4.3.1",
        "pkg:npm/esbuild@0.18.20"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@bundled-es-modules/deepmerge@4.3.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-08T02:50:36Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, November 8, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'deepmerge' with version '4.3.2'. The package type in this SBOM is npm with a single purl namespace '@esbuild' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}