{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:d5a6dd05-8300-43ce-a5e7-87418a25fc4f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-17T23:54:45Z",
    "component": {
      "type": "application",
      "name": "Aidbox",
      "version": "edge",
      "bom-ref": "Aidbox"
    },
    "supplier": {
      "name": "Health Samurai Inc."
    },
    "authors": [
      {
        "name": "Health Samurai Inc."
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/selmer/selmer@1.12.62?type=jar",
      "group": "selmer",
      "name": "selmer",
      "version": "1.12.62",
      "scope": "required",
      "purl": "pkg:maven/selmer/selmer@1.12.62?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/clojure@1.12.0?type=jar",
      "group": "org.clojure",
      "name": "clojure",
      "version": "1.12.0",
      "description": "Clojure core environment and runtime library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/clojure@1.12.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.specs.alpha@0.4.74?type=jar",
      "group": "org.clojure",
      "name": "core.specs.alpha",
      "version": "0.4.74",
      "description": "Specs for clojure.core",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.specs.alpha@0.4.74?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.specs.alpha",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.apollographql.federation/federation-graphql-java-support@5.5.0?type=jar",
      "publisher": "https://www.apollographql.com/about-us",
      "group": "com.apollographql.federation",
      "name": "federation-graphql-java-support",
      "version": "5.5.0",
      "description": "GraphQL Java server support for Apollo Federation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.apollographql.federation/federation-graphql-java-support@5.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/apollographql/federation-jvm",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.16",
      "description": "The slf4j API",
      "scope": "required",
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "3.25.5",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an\nefficient yet extensible format.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/protocolbuffers/protobuf",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.1.1",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173),\r\nSAX2 and Stax2 APIs",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.2",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with\ncompression and archive formats. These include bzip2, gzip, pack200,\nLZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,\nBrotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.19.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for\nformats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these\nwidely used encoders and decoders, the codec package also maintains a\ncollection of phonetic encoding utilities.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.20.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters,\nfile comparators, endian transformation classes, and much more.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.18.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the\nclasses that are in java.lang's hierarchy, or are considered to be so\nstandard as to justify existence in java.lang.\nThe code is tested using the latest revision of the JDK for supported\nLTS releases: 8, 11, 17 and 21 currently.\nSee https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\nPlease ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.draines/postal@2.0.5?type=jar",
      "group": "com.draines",
      "name": "postal",
      "version": "2.0.5",
      "scope": "required",
      "purl": "pkg:maven/com.draines/postal@2.0.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5?type=jar",
      "publisher": "Oracle",
      "group": "com.sun.mail",
      "name": "jakarta.mail",
      "version": "1.6.5",
      "description": "${project.name}",
      "scope": "required",
      "licenses": [
        {
          "expression": "EDL 1.0"
        }
      ],
      "purl": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/mail",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1?type=jar",
      "group": "com.sun.activation",
      "name": "jakarta.activation",
      "version": "1.2.1",
      "description": "${project.name}",
      "scope": "required",
      "licenses": [
        {
          "expression": "EDL 1.0"
        }
      ],
      "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaf",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/web-template@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "web-template",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/web-template@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/tools@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "tools",
      "version": "3.13.0",
      "description": "tools that operate on the archie reference models and archetype object model",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/tools@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "group": "javax.activation",
      "name": "activation",
      "version": "1.1.1",
      "description": "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0",
            "url": "https://opensource.org/licenses/CDDL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.zafarkhaja/java-semver@0.10.2?type=jar",
      "group": "com.github.zafarkhaja",
      "name": "java-semver",
      "version": "0.10.2",
      "description": "Java implementation of the SemVer Specification",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.github.zafarkhaja/java-semver@0.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/zafarkhaja/jsemver",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/grammars@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "grammars",
      "version": "3.13.0",
      "description": "grammars for parsing ADL, ODIN and xpath",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/grammars@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4",
      "version": "4.13.2",
      "description": "The ANTLR 4 grammar compiler.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/antlr/antlr4/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr-runtime",
      "version": "3.5.3",
      "description": "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "scope": "required",
      "licenses": [
        {
          "expression": "BSD licence"
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/antlr/antlr3/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/ST4@4.3.4?type=jar",
      "group": "org.antlr",
      "name": "ST4",
      "version": "4.3.4",
      "description": "StringTemplate is a java template engine for generating source code,\nweb pages, emails, or any other formatted text output.\nStringTemplate is particularly good at multi-targeted code generators,\nmultiple site skins, and internationalization/localization.\nIt evolved over years of effort developing jGuru.com.\nStringTemplate also powers the ANTLR 3 and 4 code generator. Its distinguishing characteristic\nis that unlike other engines, it strictly enforces model-view separation.\nStrict separation makes websites and code generators more flexible\nand maintainable; it also provides an excellent defense against malicious\ntemplate authors.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/ST4@4.3.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/antlr/stringtemplate4/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.abego.treelayout/org.abego.treelayout.core@1.0.3?type=jar",
      "publisher": "abego Software GmbH, Germany",
      "group": "org.abego.treelayout",
      "name": "org.abego.treelayout.core",
      "version": "1.0.3",
      "description": "Efficient and customizable TreeLayout Algorithm in Java.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.abego.treelayout/org.abego.treelayout.core@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/abego/treelayout",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/base@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "base",
      "version": "3.13.0",
      "description": "Base classes for an OpenEHR implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/base@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/aom@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "aom",
      "version": "3.13.0",
      "description": "An OpenEHR archetype object model implementation, plus parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/aom@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/odin@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "odin",
      "version": "3.13.0",
      "description": "An odin implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/odin@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/bmm@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "bmm",
      "version": "3.13.0",
      "description": "A basic metadata model implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/bmm@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/path-queries@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "path-queries",
      "version": "3.13.0",
      "description": "An implementation of openehr path queries",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/path-queries@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/utils@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "utils",
      "version": "3.13.0",
      "description": "Basic utilities for use in the archie library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/utils@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/openehr-terminology@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "openehr-terminology",
      "version": "3.13.0",
      "description": "A very basic OpenEHR terminology file binding",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/openehr-terminology@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.leadpony.justify/justify@3.1.0?type=jar",
      "group": "org.leadpony.justify",
      "name": "justify",
      "version": "3.1.0",
      "description": "Justify is a JSON validator based on the JSON Schema specification\nand the JSON Processing API.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.leadpony.justify/justify@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leadpony/justify",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.0.0",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "licenses": [
        {
          "expression": "Eclipse Public License 2.0 OR GNU General Public License, version 2 with the GNU Classpath Exception"
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ibm.icu/icu4j@68.1?type=jar",
      "group": "com.ibm.icu",
      "name": "icu4j",
      "version": "68.1",
      "description": "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library\nproviding Unicode and Globalization support",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ICU",
            "url": "https://opensource.org/licenses/ICU"
          }
        }
      ],
      "purl": "pkg:maven/com.ibm.icu/icu4j@68.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/unicode-org/icu",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/jakarta.json@2.0.1?classifier=module&type=jar",
      "group": "org.glassfish",
      "name": "jakarta.json",
      "version": "2.0.1",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "licenses": [
        {
          "expression": "Eclipse Public License 2.0 OR GNU General Public License, version 2 with the GNU Classpath Exception"
        }
      ],
      "purl": "pkg:maven/org.glassfish/jakarta.json@2.0.1?classifier=module&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "group": "org.reflections",
      "name": "reflections",
      "version": "0.10.2",
      "description": "Reflections - Java runtime metadata analysis",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "https://opensource.org/licenses/WTFPL"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ronmamo/reflections/issues",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.28.0-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation\nsimple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1",
            "url": "https://opensource.org/licenses/MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://opensource.org/licenses/LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.esotericsoftware.kryo/kryo5@5.6.2?type=jar",
      "group": "com.esotericsoftware.kryo",
      "name": "kryo5",
      "version": "5.6.2",
      "description": "Fast, efficient Java serialization. This is the version specific Kryo artifact.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.esotericsoftware.kryo/kryo5@5.6.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/EsotericSoftware/kryo",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/aql@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "aql",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/aql@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/openehr-rm@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "openehr-rm",
      "version": "3.13.0",
      "description": "An implementation of the openehr reference model",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/openehr-rm@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/archie-utils@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "archie-utils",
      "version": "3.13.0",
      "description": "Utils for the Archie OpenEHR library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/archie-utils@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/util@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "util",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/util@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
      "group": "io.github.classgraph",
      "name": "classgraph",
      "version": "4.8.181",
      "description": "The uber-fast, ultra-lightweight classpath and module scanner\nfor JVM languages.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/classgraph/classgraph",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/terminology@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "terminology",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/terminology@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
      "group": "javax.cache",
      "name": "cache-api",
      "version": "1.1.1",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/taipei.404/html-to-hiccup@0.1.8?type=jar",
      "group": "taipei.404",
      "name": "html-to-hiccup",
      "version": "0.1.8",
      "scope": "required",
      "purl": "pkg:maven/taipei.404/html-to-hiccup@0.1.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/instaparse/instaparse@1.4.10?type=jar",
      "group": "instaparse",
      "name": "instaparse",
      "version": "1.4.10",
      "scope": "required",
      "purl": "pkg:maven/instaparse/instaparse@1.4.10?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.velisco/clj-ftp@1.2.0?type=jar",
      "group": "com.velisco",
      "name": "clj-ftp",
      "version": "1.2.0",
      "scope": "required",
      "purl": "pkg:maven/com.velisco/clj-ftp@1.2.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-commons/fs@1.6.310?type=jar",
      "group": "clj-commons",
      "name": "fs",
      "version": "1.6.310",
      "scope": "required",
      "purl": "pkg:maven/clj-commons/fs@1.6.310?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.tukaani/xz@1.8?type=jar",
      "group": "org.tukaani",
      "name": "xz",
      "version": "1.8",
      "description": "XZ data compression",
      "scope": "required",
      "licenses": [
        {
          "expression": "Public Domain"
        }
      ],
      "purl": "pkg:maven/org.tukaani/xz@1.8?type=jar",
      "externalReferences": [
        {
          "url": "https://git.tukaani.org/?p=xz-java.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-net/commons-net@3.10.0?type=jar",
      "group": "commons-net",
      "name": "commons-net",
      "version": "3.10.0",
      "description": "Apache Commons Net library contains a collection of network utilities and protocol implementations.\nSupported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-net",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.schematron/ph-schematron-xslt@8.0.6?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.schematron",
      "name": "ph-schematron-xslt",
      "version": "8.0.6",
      "description": "Library for validating XML documents using the original Schematron implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.schematron/ph-schematron-xslt@8.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/phax/ph-schematron",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.schematron/ph-schematron-api@8.0.6?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.schematron",
      "name": "ph-schematron-api",
      "version": "8.0.6",
      "description": "Base API for the library for validating XML documents with Schematron",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.schematron/ph-schematron-api@8.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/phax/ph-schematron",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.commons/ph-commons@11.2.0?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.commons",
      "name": "ph-commons",
      "version": "11.2.0",
      "description": "Java 1.8+ Library with tons of utility classes required in all projects",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.commons/ph-commons@11.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/phax/ph-commons",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.commons/ph-xml@11.2.0?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.commons",
      "name": "ph-xml",
      "version": "11.2.0",
      "description": "Java 1.8+ Library with XML handling routines",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.commons/ph-xml@11.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/phax/ph-commons",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.commons/ph-jaxb@11.2.0?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.commons",
      "name": "ph-jaxb",
      "version": "11.2.0",
      "description": "Special Java 1.8+ Library with extended JAXB support",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.commons/ph-jaxb@11.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/phax/ph-commons",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.helger.xsd/ph-xsds-xml@3.0.0?type=jar",
      "publisher": "Philip Helger",
      "group": "com.helger.xsd",
      "name": "ph-xsds-xml",
      "version": "3.0.0",
      "description": "XML.xsd wrapped in JAXB",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.helger.xsd/ph-xsds-xml@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/phax/ph-xsds",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "publisher": "Saxonica",
      "group": "net.sf.saxon",
      "name": "Saxon-HE",
      "version": "12.5",
      "description": "The XSLT and XQuery Processor",
      "scope": "required",
      "licenses": [
        {
          "expression": "Mozilla Public License Version 2.0"
        }
      ],
      "purl": "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "externalReferences": [
        {
          "url": "https://saxonica.plan.io/projects/saxonmirrorhe/repository",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "group": "org.xmlresolver",
      "name": "xmlresolver",
      "version": "5.2.2",
      "description": "An XML entity/uri resolver",
      "scope": "required",
      "licenses": [
        {
          "expression": "Apache License version 2.0"
        }
      ],
      "purl": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "externalReferences": [
        {
          "url": "scm:git@github.com:xmlresolver/xmlresolver.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.1.3",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.1.3",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "group": "org.xmlresolver",
      "name": "xmlresolver",
      "version": "5.2.2",
      "description": "An XML entity/uri resolver",
      "scope": "required",
      "licenses": [
        {
          "expression": "Apache License version 2.0"
        }
      ],
      "purl": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "externalReferences": [
        {
          "url": "scm:git@github.com:xmlresolver/xmlresolver.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/spec.alpha@0.6.249?type=jar",
      "group": "org.clojure",
      "name": "spec.alpha",
      "version": "0.6.249",
      "description": "Specification of data and functions",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/spec.alpha@0.6.249?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/spec.alpha",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.11.1?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.11.1",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.11.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/antlr/antlr4/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/pandect/pandect@1.0.2?type=jar",
      "group": "pandect",
      "name": "pandect",
      "version": "1.0.2",
      "scope": "required",
      "purl": "pkg:maven/pandect/pandect@1.0.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/crypto-password/crypto-password@0.3.0?type=jar",
      "group": "crypto-password",
      "name": "crypto-password",
      "version": "0.3.0",
      "scope": "required",
      "purl": "pkg:maven/crypto-password/crypto-password@0.3.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/crypto-random/crypto-random@1.2.1?type=jar",
      "group": "crypto-random",
      "name": "crypto-random",
      "version": "1.2.1",
      "scope": "required",
      "purl": "pkg:maven/crypto-random/crypto-random@1.2.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/crypto-equality/crypto-equality@1.0.0?type=jar",
      "group": "crypto-equality",
      "name": "crypto-equality",
      "version": "1.0.0",
      "scope": "required",
      "purl": "pkg:maven/crypto-equality/crypto-equality@1.0.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.favre.lib/bcrypt@0.9.0?type=jar",
      "group": "at.favre.lib",
      "name": "bcrypt",
      "version": "0.9.0",
      "description": "Bcrypt is a password hashing function designed by Niels Provos and David Mazières, based on the\nBlowfish cipher. The core of this implementation is based on jBcrypt, but heavily refactored, modernized and\nwith a lot of updates and enhancements.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.favre.lib/bcrypt@0.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/patrickfav/bcrypt",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.favre.lib/bytes@1.3.0?type=jar",
      "group": "at.favre.lib",
      "name": "bytes",
      "version": "1.3.0",
      "description": "Bytes is a utility library that makes it easy to create, parse, transform, validate and convert byte\narrays in Java. It supports endianness as well as immutability and mutability, so the caller may decide to favor\nperformance.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.favre.lib/bytes@1.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/patrickfav/bytes-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.lambdaworks/scrypt@1.4.0?type=jar",
      "group": "com.lambdaworks",
      "name": "scrypt",
      "version": "1.4.0",
      "description": "Java implementation of scrypt",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.lambdaworks/scrypt@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/wg/scrypt",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/s3@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "s3",
      "version": "2.44.9",
      "description": "The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with\nAmazon Simple Storage Service",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/s3@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "aws-xml-protocol",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - module holds the classes for AWS Xml protocol",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "aws-query-protocol",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - module holds the classes for AWS Query protocol",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/protocol-core@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "protocol-core",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - module holds the core protocol classes",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/protocol-core@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/arns@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "arns",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Arns module holds the classes that are related to AWS ARN",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/arns@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/profiles@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "profiles",
      "version": "2.44.9",
      "description": "Profile module allows loading information from AWS configuration and credentials files.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/profiles@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/crt-core@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "crt-core",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - AWS CRT Core holds common types that are built on the AWS Common Runtime",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/crt-core@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "http-auth",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - HTTP Auth module contains interfaces and implementations\nfor generic HTTP authentication",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/http-auth@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/identity-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "identity-spi",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Identity SPI module contains the Identity interfaces that are used by other modules in\nthe library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/identity-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "http-auth-spi",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - HTTP Auth SPI module contains the interfaces for authentication that are used by other\nmodules in the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "http-auth-aws",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - HTTP Auth AWS module contains interfaces and implementations for HTTP\nauthentication specific to AWS.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/checksums@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "checksums",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Checksums module contains checksums and related items that are used by other modules in\nthe library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/checksums@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/checksums-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "checksums-spi",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Checksums SPI module contains checksum interfaces that are used by other modules\nin the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/checksums-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/retries-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "retries-spi",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/retries-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/sdk-core@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "sdk-core",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - SDK Core runtime module holds the classes that are used by the individual service\nclients to interact with\nAmazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/sdk-core@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/retries@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "retries",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/retries@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/http-client-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "http-client-spi",
      "version": "2.44.9",
      "description": "The Amazon Web Services SDK for Java provides Java APIs\nfor building software on AWS' cost-effective, scalable, and reliable\ninfrastructure products. The AWS Java SDK allows developers to code\nagainst APIs for all of Amazon's infrastructure web services (Amazon\nS3, Amazon EC2, Amazon SQS, Amazon Relational Database Service, Amazon\nAutoScaling, etc).",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/http-client-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/regions@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "regions",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/regions@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/annotations@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "annotations",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/annotations@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/utils@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "utils",
      "version": "2.44.9",
      "description": "The Amazon Web Services SDK for Java provides Java APIs\nfor building software on AWS' cost-effective, scalable, and reliable\ninfrastructure products. The AWS Java SDK allows developers to code\nagainst APIs for all of Amazon's infrastructure web services (Amazon\nS3, Amazon EC2, Amazon SQS, Amazon Relational Database Service, Amazon\nAutoScaling, etc).",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/utils@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/aws-core@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "aws-core",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core runtime module holds the classes that are used by the individual service\nclients to interact with\nAmazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/aws-core@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/utils-lite@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "utils-lite",
      "version": "2.44.9",
      "description": "A package providing minimal external utils.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/utils-lite@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/metrics-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "metrics-spi",
      "version": "2.44.9",
      "description": "This is the base module for SDK metrics feature. It contains the interfaces used for metrics feature\nthat are used by other modules in the library.",
      "scope": "required",
      "purl": "pkg:maven/software.amazon.awssdk/metrics-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/json-utils@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "json-utils",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/json-utils@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "third-party-jackson-core",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Third Party is an umbrella module that contains child modules which are shaded third-\nparty dependencies.",
      "scope": "required",
      "purl": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "endpoints-spi",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Core is an umbrella module that contains child modules which are considered as\ncore of the library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/apache-client@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "apache-client",
      "version": "2.44.9",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/apache-client@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/software.amazon.awssdk/netty-nio-client@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "netty-nio-client",
      "version": "2.44.9",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/netty-nio-client@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-common@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-common",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-common@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-handler",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport-classes-epoll",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.133.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-resolver",
      "version": "4.1.133.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.133.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.healthsamurai.aidbox/api@0.0.13?type=jar",
      "group": "io.healthsamurai.aidbox",
      "name": "api",
      "version": "0.0.13",
      "scope": "required",
      "purl": "pkg:maven/io.healthsamurai.aidbox/api@0.0.13?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.cronutils/cron-utils@9.2.1?type=jar",
      "group": "com.cronutils",
      "name": "cron-utils",
      "version": "9.2.1",
      "description": "A Java library to parse, migrate and validate crons as well as describe them in human readable\r\nlanguage",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.cronutils/cron-utils@9.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jmrozanec/cron-utils",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-storage@2.58.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud",
      "name": "google-cloud-storage",
      "version": "2.58.1",
      "description": "Java idiomatic client for Google Cloud Storage.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud/google-cloud-storage@2.58.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-storage/google-cloud-storage",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.4.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include\nutility classes, Google's collections, I/O classes, and\nmuch more.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.2",
      "description": "Contains\ncom.google.common.util.concurrent.internal.InternalFutureFailureAccess and\nInternalFutures. Most users will never need to use this artifact. Its\nclasses are conceptually a part of Guava, but they're in this separate\nartifact so that Android libraries can use them without pulling in all of\nGuava (just as they can use ListenableFuture by depending on the\nlistenablefuture artifact).",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing\nListenableFuture -- but is also available in a second \"version\" that\ncontains com.google.common.util.concurrent.ListenableFuture class, without\nany other Guava classes. The idea is:\n- If users want only ListenableFuture, they depend on listenablefuture-1.0.\n- If users want all of Guava, they depend on guava, which, as of Guava\n27.0, depends on\nlistenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...\nversion number is enough for some build systems (notably, Gradle) to select\nthat empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a\nconflict with the copy of ListenableFuture in guava itself. If users are\nusing an older version of Guava or a build system other than Gradle, they\nmay see class conflicts. If so, they can solve them by manually excluding\nthe listenablefuture artifact or manually forcing their build systems to\nuse 9999.0-....",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.38.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/error-prone",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.0.0",
      "description": "A set of annotations that provide additional information to the J2ObjC\ntranslator to modify the result of translation.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@1.47.1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "1.47.1",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms,\nincluding Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@1.47.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.71.0",
      "description": "gRPC: Context",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.47.1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-jackson2",
      "version": "1.47.1",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.47.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.47.1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "1.47.1",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@1.47.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.7.2",
      "description": "The Google APIs Client Library for Java is a Java client library\nfor accessing any HTTP-based API on the web",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms,\nincluding Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.47.1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "1.47.1",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.47.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20250925-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-storage",
      "version": "v1-rev20250925-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20250925-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.12.1",
      "description": "Gson JSON library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-core@2.60.3?type=jar",
      "group": "com.google.cloud",
      "name": "google-cloud-core",
      "version": "2.60.3",
      "description": "Core module for the google-cloud.",
      "scope": "required",
      "purl": "pkg:maven/com.google.cloud/google-cloud-core@2.60.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8+.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-core-http@2.60.3?type=jar",
      "group": "com.google.cloud",
      "name": "google-cloud-core-http",
      "version": "2.60.3",
      "description": "Core http module for the google-cloud.",
      "scope": "required",
      "purl": "pkg:maven/com.google.cloud/google-cloud-core-http@2.60.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-appengine@1.47.1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-appengine",
      "version": "1.47.1",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-appengine@1.47.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax-httpjson@2.70.3?type=jar",
      "group": "com.google.api",
      "name": "gax-httpjson",
      "version": "2.70.3",
      "description": "Google Api eXtensions for Java (HTTP JSON)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax-httpjson@2.70.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-core-grpc@2.60.3?type=jar",
      "group": "com.google.cloud",
      "name": "google-cloud-core-grpc",
      "version": "2.60.3",
      "description": "Core gRPC module for the google-cloud.",
      "scope": "required",
      "purl": "pkg:maven/com.google.cloud/google-cloud-core-grpc@2.60.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.70.3?type=jar",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.70.3",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.70.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax-grpc@2.70.3?type=jar",
      "group": "com.google.api",
      "name": "gax-grpc",
      "version": "2.70.3",
      "description": "Google Api eXtensions for Java (gRPC)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax-grpc@2.70.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-inprocess@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-inprocess",
      "version": "1.71.0",
      "description": "gRPC: Inprocess",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-inprocess@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-alts@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-alts",
      "version": "1.71.0",
      "description": "gRPC: ALTS",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-alts@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-grpclb@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-grpclb",
      "version": "1.71.0",
      "description": "gRPC: GRPCLB LoadBalancer plugin",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-grpclb@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.2?type=jar",
      "group": "org.conscrypt",
      "name": "conscrypt-openjdk-uber",
      "version": "2.5.2",
      "description": "Conscrypt: OpenJdk UberJAR",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/conscrypt",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-auth@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-auth",
      "version": "1.71.0",
      "description": "gRPC: Auth",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-auth@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.39.1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.39.1",
      "description": "Client libraries providing authentication and\nauthorization to enable calling Google APIs.",
      "scope": "required",
      "licenses": [
        {
          "expression": "BSD New license"
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.39.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.39.1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.39.1",
      "description": "Client libraries providing authentication and\nauthorization to enable calling Google APIs.",
      "scope": "required",
      "licenses": [
        {
          "expression": "BSD New license"
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.39.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.53.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.53.3",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.53.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-context@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-context",
      "version": "1.47.0",
      "description": "OpenTelemetry Context (Incubator)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-context@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/proto-google-iam-v1@1.56.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "proto-google-iam-v1",
      "version": "1.56.3",
      "description": "PROTO library for proto-google-iam-v1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/proto-google-iam-v1@1.56.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.8?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "3.25.8",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/protocolbuffers/protobuf",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-core@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-core",
      "version": "1.71.0",
      "description": "gRPC: Core",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-core@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.android/annotations@4.1.1.4?type=jar",
      "group": "com.google.android",
      "name": "annotations",
      "version": "4.1.1.4",
      "scope": "required",
      "purl": "pkg:maven/com.google.android/annotations@4.1.1.4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.24?type=jar",
      "group": "org.codehaus.mojo",
      "name": "animal-sniffer-annotations",
      "version": "1.24",
      "description": "Animal Sniffer Parent POM.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.24?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mojohaus/animal-sniffer/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.perfmark/perfmark-api@0.27.0?type=jar",
      "group": "io.perfmark",
      "name": "perfmark-api",
      "version": "0.27.0",
      "description": "PerfMark API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.perfmark/perfmark-api@0.27.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/perfmark/perfmark",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-protobuf@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-protobuf",
      "version": "1.71.0",
      "description": "gRPC: Protobuf",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-protobuf@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-protobuf-lite@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-protobuf-lite",
      "version": "1.71.0",
      "description": "gRPC: Protobuf Lite",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-protobuf-lite@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.61.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "proto-google-common-protos",
      "version": "2.61.3",
      "description": "PROTO library for proto-google-common-protos",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.61.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threetenbp@1.7.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threetenbp",
      "version": "1.7.0",
      "description": "Backport of JSR-310 from JDK 8 to JDK 7 and JDK 6. NOT an implementation of the JSR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threetenbp@1.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ThreeTen/threetenbp",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-storage-v2@2.58.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "proto-google-cloud-storage-v2",
      "version": "2.58.1",
      "description": "PROTO library for proto-google-cloud-storage-v2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/proto-google-cloud-storage-v2@2.58.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-storage",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/grpc-google-cloud-storage-v2@2.58.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "grpc-google-cloud-storage-v2",
      "version": "2.58.1",
      "description": "GRPC library for grpc-google-cloud-storage-v2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/grpc-google-cloud-storage-v2@2.58.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-storage",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/gapic-google-cloud-storage-v2@2.58.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "gapic-google-cloud-storage-v2",
      "version": "2.58.1",
      "description": "GRPC library for gapic-google-cloud-storage-v2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/gapic-google-cloud-storage-v2@2.58.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-storage",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk",
      "version": "1.47.0",
      "description": "OpenTelemetry SDK",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-trace@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk-trace",
      "version": "1.47.0",
      "description": "OpenTelemetry SDK For Tracing",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk-trace@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-logs@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk-logs",
      "version": "1.47.0",
      "description": "OpenTelemetry Log SDK",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk-logs@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-opentelemetry@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-opentelemetry",
      "version": "1.71.0",
      "description": "gRPC: OpenTelemetry",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-opentelemetry@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-api@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-api",
      "version": "1.47.0",
      "description": "OpenTelemetry API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-api@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-metrics@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk-metrics",
      "version": "1.47.0",
      "description": "OpenTelemetry SDK Metrics",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk-metrics@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-common@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk-common",
      "version": "1.47.0",
      "description": "OpenTelemetry SDK Common",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk-common@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi@1.47.0?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-sdk-extension-autoconfigure-spi",
      "version": "1.47.0",
      "description": "OpenTelemetry SDK Auto-configuration SPI",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi@1.47.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.29.0-alpha?type=jar",
      "group": "io.opentelemetry.semconv",
      "name": "opentelemetry-semconv",
      "version": "1.29.0-alpha",
      "description": "OpenTelemetry Stable Semantic Conventions generated classes for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.29.0-alpha?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.opentelemetry/exporter-metrics@0.33.0?type=jar",
      "group": "com.google.cloud.opentelemetry",
      "name": "exporter-metrics",
      "version": "0.33.0",
      "description": "Cloud Monitoring Exporter for OpenTelemetry",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.opentelemetry/exporter-metrics@0.33.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-monitoring@3.52.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud",
      "name": "google-cloud-monitoring",
      "version": "3.52.0",
      "description": "Java idiomatic client for Stackdriver Monitoring",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud/google-cloud-monitoring@3.52.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-monitoring-v3@3.52.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "proto-google-cloud-monitoring-v3",
      "version": "3.52.0",
      "description": "PROTO library for proto-google-cloud-monitoring-v3",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/proto-google-cloud-monitoring-v3@3.52.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.opentelemetry/shared-resourcemapping@0.33.0?type=jar",
      "group": "com.google.cloud.opentelemetry",
      "name": "shared-resourcemapping",
      "version": "0.33.0",
      "description": "Resource helper utilites for GCP within OpenTelemetry",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.opentelemetry/shared-resourcemapping@0.33.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry.contrib/opentelemetry-gcp-resources@1.37.0-alpha?type=jar",
      "group": "io.opentelemetry.contrib",
      "name": "opentelemetry-gcp-resources",
      "version": "1.37.0-alpha",
      "description": "OpenTelemetry GCP Resources Support",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry.contrib/opentelemetry-gcp-resources@1.37.0-alpha?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.opentelemetry/detector-resources-support@0.33.0?type=jar",
      "group": "com.google.cloud.opentelemetry",
      "name": "detector-resources-support",
      "version": "0.33.0",
      "description": "Support library for Google Cloud Resource Detector",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.opentelemetry/detector-resources-support@0.33.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.49.0",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.18.2",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.71.0",
      "description": "gRPC: API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-netty-shaded@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-netty-shaded",
      "version": "1.71.0",
      "description": "gRPC: Netty Shaded",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-netty-shaded@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-util@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-util",
      "version": "1.71.0",
      "description": "gRPC: Util",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-util@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-stub@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-stub",
      "version": "1.71.0",
      "description": "gRPC: Stub",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-stub@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-googleapis@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-googleapis",
      "version": "1.71.0",
      "description": "gRPC: googleapis",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-googleapis@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-services@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-services",
      "version": "1.71.0",
      "description": "gRPC: Services",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-services@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "licenses": [
        {
          "expression": "Go License"
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-rls@1.71.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-rls",
      "version": "1.71.0",
      "description": "gRPC: RouteLookupService Loadbalancing plugin",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-rls@1.71.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.5?type=jar",
      "group": "com.sun.xml.bind",
      "name": "jaxb-core",
      "version": "4.0.5",
      "description": "Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "licenses": [
        {
          "expression": "Eclipse Distribution License - v 1.0"
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "${project.name} ${spec.version} Specification",
      "scope": "required",
      "licenses": [
        {
          "expression": "EDL 1.0"
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.2",
      "description": "${project.name} Implementation",
      "scope": "required",
      "licenses": [
        {
          "expression": "EDL 1.0"
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud/google-cloud-pubsub@1.140.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud",
      "name": "google-cloud-pubsub",
      "version": "1.140.1",
      "description": "Java idiomatic client for Google Cloud Pub/Sub",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud/google-cloud-pubsub@1.140.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-pubsub/google-cloud-pubsub",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-pubsub-v1@1.122.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api.grpc",
      "name": "proto-google-cloud-pubsub-v1",
      "version": "1.122.1",
      "description": "PROTO library for proto-google-cloud-pubsub-v1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api.grpc/proto-google-cloud-pubsub-v1@1.122.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/java-pubsub/proto-google-cloud-pubsub-v1",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.26.0-alpha?type=jar",
      "group": "io.opentelemetry",
      "name": "opentelemetry-semconv",
      "version": "1.26.0-alpha",
      "description": "OpenTelemetry Semantic Conventions",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.26.0-alpha?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.widdindustries/cljc.java-time@0.1.21?type=jar",
      "group": "com.widdindustries",
      "name": "cljc.java-time",
      "version": "0.1.21",
      "scope": "required",
      "purl": "pkg:maven/com.widdindustries/cljc.java-time@0.1.21?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.widdindustries/cljs.java-time@0.1.20?type=jar",
      "group": "com.widdindustries",
      "name": "cljs.java-time",
      "version": "0.1.20",
      "scope": "required",
      "purl": "pkg:maven/com.widdindustries/cljs.java-time@0.1.20?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-defaults@0.6.0?type=jar",
      "group": "ring",
      "name": "ring-defaults",
      "version": "0.6.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-defaults@0.6.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-core@1.13.0?type=jar",
      "group": "ring",
      "name": "ring-core",
      "version": "1.13.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-core@1.13.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ring-clojure/ring-core-protocols@1.13.0?type=jar",
      "group": "org.ring-clojure",
      "name": "ring-core-protocols",
      "version": "1.13.0",
      "scope": "required",
      "purl": "pkg:maven/org.ring-clojure/ring-core-protocols@1.13.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ring-clojure/ring-websocket-protocols@1.13.0?type=jar",
      "group": "org.ring-clojure",
      "name": "ring-websocket-protocols",
      "version": "1.13.0",
      "scope": "required",
      "purl": "pkg:maven/org.ring-clojure/ring-websocket-protocols@1.13.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-codec@1.2.0?type=jar",
      "group": "ring",
      "name": "ring-codec",
      "version": "1.2.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-codec@1.2.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M1?type=jar",
      "group": "org.apache.commons",
      "name": "commons-fileupload2-core",
      "version": "2.0.0-M1",
      "description": "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart\nfile upload functionality to servlets, portlets, and web applications.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M1?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-ssl@0.4.0?type=jar",
      "group": "ring",
      "name": "ring-ssl",
      "version": "0.4.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-ssl@0.4.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-headers@0.4.0?type=jar",
      "group": "ring",
      "name": "ring-headers",
      "version": "0.4.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-headers@0.4.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-anti-forgery@1.4.0?type=jar",
      "group": "ring",
      "name": "ring-anti-forgery",
      "version": "1.4.0",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-anti-forgery@1.4.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ring-clojure/ring-websocket-middleware@0.2.1?type=jar",
      "group": "org.ring-clojure",
      "name": "ring-websocket-middleware",
      "version": "0.2.1",
      "scope": "required",
      "purl": "pkg:maven/org.ring-clojure/ring-websocket-middleware@0.2.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.pdfbox",
      "name": "pdfbox",
      "version": "2.0.30",
      "description": "The Apache PDFBox library is an open source Java tool for working with PDF documents.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/viewvc/pdfbox/tags/2.0.30",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.pdfbox",
      "name": "fontbox",
      "version": "2.0.30",
      "description": "The Apache FontBox library is an open source Java tool to obtain low level information\nfrom font files. FontBox is a subproject of Apache PDFBox.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/viewvc/pdfbox/tags/2.0.30",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other,\nwell known logging systems.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/rewrite-clj/rewrite-clj@1.2.50?type=jar",
      "group": "rewrite-clj",
      "name": "rewrite-clj",
      "version": "1.2.50",
      "scope": "required",
      "purl": "pkg:maven/rewrite-clj/rewrite-clj@1.2.50?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/honeysql/honeysql@1.0.461?type=jar",
      "group": "honeysql",
      "name": "honeysql",
      "version": "1.0.461",
      "scope": "required",
      "purl": "pkg:maven/honeysql/honeysql@1.0.461?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar",
      "group": "org.bouncycastle",
      "name": "bcpkix-jdk18on",
      "version": "1.81",
      "description": "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.",
      "scope": "required",
      "licenses": [
        {
          "expression": "Bouncy Castle Licence"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/bcgit/bc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81.1?type=jar",
      "group": "org.bouncycastle",
      "name": "bcprov-jdk18on",
      "version": "1.81.1",
      "description": "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.81.1 for Java 1.8 and later.",
      "scope": "required",
      "licenses": [
        {
          "expression": "Bouncy Castle Licence"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/bcgit/bc-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.goterl/lazysodium-java@5.2.0?type=jar",
      "group": "com.goterl",
      "name": "lazysodium-java",
      "version": "5.2.0",
      "description": "Lazysodium (Java) makes it effortless for Java developers to get started with Libsodium's cryptography.",
      "scope": "required",
      "licenses": [
        {
          "expression": "Mozilla Public License, Version 2.0"
        }
      ],
      "purl": "pkg:maven/com.goterl/lazysodium-java@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/terl/lazysodium-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.java.dev.jna/jna@5.17.0?type=jar",
      "group": "net.java.dev.jna",
      "name": "jna",
      "version": "5.17.0",
      "description": "Java Native Access",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later",
            "url": "https://opensource.org/licenses/LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.java.dev.jna/jna@5.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/java-native-access/jna",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.goterl/resource-loader@2.1.0?type=jar",
      "group": "com.goterl",
      "name": "resource-loader",
      "version": "2.1.0",
      "description": "Resource Loader gives you the functions to load resource files inside or outside JARs.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.goterl/resource-loader@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/terl/resource-loader",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flatland/ordered@1.15.12?type=jar",
      "group": "org.flatland",
      "name": "ordered",
      "version": "1.15.12",
      "scope": "required",
      "purl": "pkg:maven/org.flatland/ordered@1.15.12?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.10",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-pdf/clj-pdf@2.7.0?type=jar",
      "group": "clj-pdf",
      "name": "clj-pdf",
      "version": "2.7.0",
      "scope": "required",
      "purl": "pkg:maven/clj-pdf/clj-pdf@2.7.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.librepdf/openpdf@1.3.32?type=jar",
      "group": "com.github.librepdf",
      "name": "openpdf",
      "version": "1.3.32",
      "description": "Open and Free PDF library.",
      "scope": "required",
      "licenses": [
        {
          "expression": "GNU Lesser General Public License (LGPL), Version 2.1 OR Mozilla Public License Version 2.0"
        }
      ],
      "purl": "pkg:maven/com.github.librepdf/openpdf@1.3.32?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:https://github.com/LibrePDF/OpenPDF",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.jfree/jfreechart@1.5.0?type=jar",
      "publisher": "JFree.org",
      "group": "org.jfree",
      "name": "jfreechart",
      "version": "1.5.0",
      "description": "JFreeChart is a class library, written in Java, for generating charts.\nUtilising the Java2D APIs, it currently supports bar charts, pie charts,\nline charts, XY-plots and time series plots.",
      "scope": "required",
      "licenses": [
        {
          "expression": "GNU Lesser General Public Licence"
        }
      ],
      "purl": "pkg:maven/org.jfree/jfreechart@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jfree/jfreechart",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-bridge@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-bridge",
      "version": "1.17",
      "description": "Batik bridge",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-bridge@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-awt-util",
      "version": "1.17",
      "description": "Batik AWT utilities",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-css",
      "version": "1.17",
      "description": "Batik CSS engine",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-dom@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-dom",
      "version": "1.17",
      "description": "Batik DOM implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-dom@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "group": "xml-apis",
      "name": "xml-apis",
      "version": "1.4.01",
      "description": "xml-commons provides an Apache-hosted set of DOM, SAX, and\r\nJAXP interfaces for use in other xml-based projects. Our hope is that we\r\ncan standardize on both a common version and packaging scheme for these\r\ncritical XML standards interfaces to make the lives of both our developers\r\nand users easier. The External Components portion of xml-commons contains\r\ninterfaces that are defined by external standards organizations. For DOM,\r\nthat's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for\r\nJAXP it's Sun.",
      "scope": "required",
      "licenses": [
        {
          "expression": "The SAX License OR The W3C License"
        }
      ],
      "purl": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-gvt@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-gvt",
      "version": "1.17",
      "description": "Batik Graphics Vector Tree (GVT)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-gvt@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-parser@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-parser",
      "version": "1.17",
      "description": "Batik SVG microsyntax parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-parser@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-script@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-script",
      "version": "1.17",
      "description": "Batik script language support",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-script@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-shared-resources",
      "version": "1.17",
      "description": "Batik Shared Resources",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-svg-dom",
      "version": "1.17",
      "description": "Batik SVG DOM implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-util",
      "version": "1.17",
      "description": "Batik utility library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-constants",
      "version": "1.17",
      "description": "Batik constants library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-i18n",
      "version": "1.17",
      "description": "Batik i18n library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-xml@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-xml",
      "version": "1.17",
      "description": "Batik XML utilities",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-xml@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "xml-apis",
      "name": "xml-apis-ext",
      "version": "1.3.04",
      "description": "xml-commons provides an Apache-hosted set of DOM, SAX, and\nJAXP interfaces for use in other xml-based projects. Our hope is that we\ncan standardize on both a common version and packaging scheme for these\ncritical XML standards interfaces to make the lives of both our developers\nand users easier. The External Components portion of xml-commons contains\ninterfaces that are defined by external standards organizations. For DOM,\nthat's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for\nJAXP it's Sun.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "externalReferences": [
        {
          "url": "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_3_04/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-anim@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-anim",
      "version": "1.17",
      "description": "Batik animation engine",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-anim@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-ext@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-ext",
      "version": "1.17",
      "description": "Batik external code",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-ext@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-codec@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-codec",
      "version": "1.17",
      "description": "Batik image codecs",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-codec@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-transcoder",
      "version": "1.17",
      "description": "Batik SVG transcoder",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/batik-svggen@1.17?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "batik-svggen",
      "version": "1.17",
      "description": "Batik Java2D SVG generator",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/batik-svggen@1.17?type=jar",
      "externalReferences": [
        {
          "url": "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.4?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.xmlgraphics",
      "name": "xmlgraphics-commons",
      "version": "2.4",
      "description": "Apache XML Graphics Commons is a library that consists of several reusable\r\ncomponents used by Apache Batik and Apache FOP. Many of these components\r\ncan easily be used separately outside the domains of SVG and XSL-FO.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.4?type=jar",
      "externalReferences": [
        {
          "url": "http://svn.apache.org/viewvc/xmlgraphics/commons/trunk/?root=Apache-SVN",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/markdown-clj/markdown-clj@1.12.4?type=jar",
      "group": "markdown-clj",
      "name": "markdown-clj",
      "version": "1.12.4",
      "scope": "required",
      "purl": "pkg:maven/markdown-clj/markdown-clj@1.12.4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-http/clj-http@3.13.0?type=jar",
      "group": "clj-http",
      "name": "clj-http",
      "version": "3.13.0",
      "scope": "required",
      "purl": "pkg:maven/clj-http/clj-http@3.13.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient-cache",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - Cache",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.14?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpasyncclient",
      "version": "4.1.5",
      "description": "Apache HttpComponents AsyncClient",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/repos/asf/httpcomponents/httpasyncclient/branches/4.1.x",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore-nio",
      "version": "4.4.15",
      "description": "Apache HttpComponents Core (non-blocking I/O)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/slingshot/slingshot@0.12.2?type=jar",
      "group": "slingshot",
      "name": "slingshot",
      "version": "0.12.2",
      "scope": "required",
      "purl": "pkg:maven/slingshot/slingshot@0.12.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/potemkin/potemkin@0.4.7?type=jar",
      "group": "potemkin",
      "name": "potemkin",
      "version": "0.4.7",
      "scope": "required",
      "purl": "pkg:maven/potemkin/potemkin@0.4.7?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/serialisation@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "serialisation",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/serialisation@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/com.nedap.healthcare.archie/test-rm@3.13.0?type=jar",
      "publisher": "Nedap Healthcare",
      "group": "com.nedap.healthcare.archie",
      "name": "test-rm",
      "version": "3.13.0",
      "description": "OpenEHR Test RM package",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nedap.healthcare.archie/test-rm@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/openEHR/archie",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/generator-commons@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "generator-commons",
      "version": "2.25.0",
      "scope": "required",
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/generator-commons@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "javax.xml.bind",
      "name": "jaxb-api",
      "version": "2.3.1",
      "description": "JAXB (JSR 222) API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.1",
            "url": "https://opensource.org/licenses/CDDL-1.1"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://opensource.org/licenses/GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javaee/jaxb-spec.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "publisher": "Oracle",
      "group": "javax.activation",
      "name": "javax.activation-api",
      "version": "1.2.0",
      "description": "${project.name}",
      "scope": "required",
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javaee/activation",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.19.2",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.19.2",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.19.2",
      "description": "Data format extension for Jackson to offer\nalternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "group": "org.apache.commons",
      "name": "commons-text",
      "version": "1.14.0",
      "description": "Apache Commons Text is a set of utility functions and reusable components for processing\nand manipulating text in a Java environment.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-text.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.8.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opentelemetry.proto/opentelemetry-proto@1.3.2-alpha?type=jar",
      "group": "io.opentelemetry.proto",
      "name": "opentelemetry-proto",
      "version": "1.3.2-alpha",
      "description": "Java Bindings for the OpenTelemetry Protocol (OTLP)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opentelemetry.proto/opentelemetry-proto@1.3.2-alpha?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clj-commons/clj-ssh@0.6.6?type=jar",
      "group": "org.clj-commons",
      "name": "clj-ssh",
      "version": "0.6.6",
      "scope": "required",
      "purl": "pkg:maven/org.clj-commons/clj-ssh@0.6.6?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.logging@1.2.4?type=jar",
      "group": "org.clojure",
      "name": "tools.logging",
      "version": "1.2.4",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.logging@1.2.4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.mwiede/jsch@0.2.15?type=jar",
      "group": "com.github.mwiede",
      "name": "jsch",
      "version": "0.2.15",
      "description": "JSch is a pure Java implementation of SSH2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:maven/com.github.mwiede/jsch@0.2.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mwiede/jsch",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.8.3?type=pom",
      "publisher": "Kohlschütter Search Intelligence",
      "group": "com.kohlschutter.junixsocket",
      "name": "junixsocket-core",
      "version": "2.8.3",
      "description": "The core system dependency; the one you want to add to your project",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.8.3?type=pom",
      "externalReferences": [
        {
          "url": "https://github.com/kohlschutter/junixsocket",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.8.3?type=jar",
      "publisher": "Kohlschütter Search Intelligence",
      "group": "com.kohlschutter.junixsocket",
      "name": "junixsocket-native-common",
      "version": "2.8.3",
      "description": "Binaries of the native JNI library for common platforms",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.8.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kohlschutter/junixsocket",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.8.3?type=jar",
      "publisher": "Kohlschütter Search Intelligence",
      "group": "com.kohlschutter.junixsocket",
      "name": "junixsocket-common",
      "version": "2.8.3",
      "description": "junixsocket is a Java/JNI library that allows the use of Unix Domain Sockets (AF_UNIX sockets) and other socket types, such as AF_TIPC and AF_VSOCK, from Java, using the standard Socket API",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.8.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kohlschutter/junixsocket",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.airlift/aircompressor@2.0.3?type=jar",
      "group": "io.airlift",
      "name": "aircompressor",
      "version": "2.0.3",
      "description": "Compression algorithms",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.airlift/aircompressor@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/airlift/aircompressor/tree/release-2.x",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-storage-blob@12.35.0?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-storage-blob",
      "version": "12.35.0",
      "description": "This module contains client library for Microsoft Azure Blob Storage.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-storage-blob@12.35.0?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-xml@1.2.1?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-xml",
      "version": "1.2.1",
      "description": "This package provides interfaces for reading and writing XML.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-xml@1.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-core@1.58.1?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-core",
      "version": "1.58.1",
      "description": "This package contains core types for Azure Java clients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-core@1.58.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.projectreactor/reactor-core@3.7.18?type=jar",
      "publisher": "reactor",
      "group": "io.projectreactor",
      "name": "reactor-core",
      "version": "3.7.18",
      "description": "Non-Blocking Reactive Foundation for the JVM",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.projectreactor/reactor-core@3.7.18?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/reactor/reactor-core",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-core-http-netty@1.16.5?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-core-http-netty",
      "version": "1.16.5",
      "description": "This package contains the Netty HTTP client plugin for azure-core.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-core-http-netty@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-handler-proxy",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-codec-socks",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport-native-unix-common",
      "version": "4.1.135.Final",
      "description": "Static library which contains common unix utilities.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport-native-epoll",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport-native-kqueue",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-transport-classes-kqueue",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-classes@2.0.78.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-tcnative-classes",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked\nto OpenSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-classes@2.0.78.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-x86_64&type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-aarch_64&type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-x86_64&type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-aarch_64&type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=windows-x86_64&type=jar",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "version": "2.0.78.Final",
      "description": "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked\nto BoringSSL and Apache APR.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=windows-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.18?type=jar",
      "publisher": "reactor",
      "group": "io.projectreactor.netty",
      "name": "reactor-netty-http",
      "version": "1.2.18",
      "description": "HTTP functionality for the Reactor Netty library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.18?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/reactor/reactor-netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-resolver-dns",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-resolver-dns-native-macos",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
      "publisher": "The Netty Project",
      "group": "io.netty",
      "name": "netty-resolver-dns-classes-macos",
      "version": "4.1.135.Final",
      "description": "Netty is an asynchronous event-driven network application framework for\nrapid development of maintainable high performance protocol servers and\nclients.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netty/netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.18?type=jar",
      "publisher": "reactor",
      "group": "io.projectreactor.netty",
      "name": "reactor-netty-core",
      "version": "1.2.18",
      "description": "Core functionality for the Reactor Netty library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.18?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/reactor/reactor-netty",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-storage-common@12.34.0?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-storage-common",
      "version": "12.34.0",
      "description": "This module contains common code based for all Microsoft Azure Storage client libraries.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-storage-common@12.34.0?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-storage-internal-avro@12.20.0?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-storage-internal-avro",
      "version": "12.20.0",
      "description": "This module contains internal use only avro parser code based for Microsoft Azure Storage client libraries.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-storage-internal-avro@12.20.0?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/funcool/cuerdas@2023.11.09-407?type=jar",
      "group": "funcool",
      "name": "cuerdas",
      "version": "2023.11.09-407",
      "scope": "required",
      "purl": "pkg:maven/funcool/cuerdas@2023.11.09-407?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.appsflyer/pronto@3.0.0?type=jar",
      "group": "com.appsflyer",
      "name": "pronto",
      "version": "3.0.0",
      "scope": "required",
      "purl": "pkg:maven/com.appsflyer/pronto@3.0.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/hiccup/hiccup@2.0.0?type=jar",
      "group": "hiccup",
      "name": "hiccup",
      "version": "2.0.0",
      "scope": "required",
      "purl": "pkg:maven/hiccup/hiccup@2.0.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clojure-elastic-apm/clojure-elastic-apm@0.13.1?type=jar",
      "group": "clojure-elastic-apm",
      "name": "clojure-elastic-apm",
      "version": "0.13.1",
      "scope": "required",
      "purl": "pkg:maven/clojure-elastic-apm/clojure-elastic-apm@0.13.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/superlifter/superlifter@0.1.5?type=jar",
      "group": "superlifter",
      "name": "superlifter",
      "version": "0.1.5",
      "scope": "required",
      "purl": "pkg:maven/superlifter/superlifter@0.1.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/funcool/urania@0.2.0?type=jar",
      "group": "funcool",
      "name": "urania",
      "version": "0.2.0",
      "scope": "required",
      "purl": "pkg:maven/funcool/urania@0.2.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/data.xml@0.2.0-alpha9?type=jar",
      "group": "org.clojure",
      "name": "data.xml",
      "version": "0.2.0-alpha9",
      "description": "Functions to parse XML into lazy sequences and lazy trees and emit these as text",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/data.xml@0.2.0-alpha9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.5?type=jar",
      "group": "com.sun.xml.bind",
      "name": "jaxb-impl",
      "version": "4.0.5",
      "description": "Old JAXB Runtime module. Contains sources required for runtime processing.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/bsless/clj-fast@0.0.11?type=jar",
      "group": "bsless",
      "name": "clj-fast",
      "version": "0.0.11",
      "scope": "required",
      "purl": "pkg:maven/bsless/clj-fast@0.0.11?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-identity@1.18.1?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-identity",
      "version": "1.18.1",
      "description": "This module contains client library for Microsoft Azure Identity.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-identity@1.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.azure/azure-json@1.5.0?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.azure",
      "name": "azure-json",
      "version": "1.5.0",
      "description": "This package provides interfaces for reading and writing JSON.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.azure/azure-json@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Azure/azure-sdk-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.azure/msal4j@1.23.1?type=jar",
      "group": "com.microsoft.azure",
      "name": "msal4j",
      "version": "1.23.1",
      "description": "Microsoft Authentication Library for Java gives you the ability to obtain tokens from Azure AD v2 (work and school\r\naccounts, MSA) and Azure AD B2C, gaining access to Microsoft Cloud API and any other API secured by Microsoft\r\nidentities",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/msal4j@1.23.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/AzureAD/microsoft-authentication-library-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.3.0?type=jar",
      "group": "com.microsoft.azure",
      "name": "msal4j-persistence-extension",
      "version": "1.3.0",
      "description": "Implementation of ITokenCacheAccessAspect interface defined in Java MSAL SDK (artifactId - msal4j)\nfor persistence of token cache in platform specific secret storage:\n* Win - file encrypted with DPAPI\n* Mac - key chain\n* Linux - key ring",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/AzureAD/microsoft-authentication-library-for-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.java.dev.jna/jna-platform@5.17.0?type=jar",
      "group": "net.java.dev.jna",
      "name": "jna-platform",
      "version": "5.17.0",
      "description": "Java Native Access Platform",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later",
            "url": "https://opensource.org/licenses/LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.java.dev.jna/jna-platform@5.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/java-native-access/jna",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.5.2",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.5.2",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.7.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/borkdude/edamame@1.4.30?type=jar",
      "group": "borkdude",
      "name": "edamame",
      "version": "1.4.30",
      "scope": "required",
      "purl": "pkg:maven/borkdude/edamame@1.4.30?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/data.csv@1.1.0?type=jar",
      "group": "org.clojure",
      "name": "data.csv",
      "version": "1.1.0",
      "description": "A Clojure library for reading and writing comma separated value (csv) files",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/data.csv@1.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-nop@2.1.0-alpha1?type=jar",
      "publisher": "QOS.CH Sarl",
      "group": "org.slf4j",
      "name": "slf4j-nop",
      "version": "2.1.0-alpha1",
      "description": "SLF4J NOP Provider",
      "scope": "required",
      "purl": "pkg:maven/org.slf4j/slf4j-nop@2.1.0-alpha1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.cognitect/transit-clj@1.0.333?type=jar",
      "group": "com.cognitect",
      "name": "transit-clj",
      "version": "1.0.333",
      "description": "Transit is a data format and a set of libraries for conveying\nvalues between applications written in different languages. This library\nprovides support for marshalling Transit data to/from Clojure.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.cognitect/transit-clj@1.0.333?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.cognitect/transit-java@1.0.371?type=jar",
      "group": "com.cognitect",
      "name": "transit-java",
      "version": "1.0.371",
      "description": "Transit is a data format and a set of libraries for conveying values between applications written in different languages. This library provides support for marshalling Transit data to/from Java.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.cognitect/transit-java@1.0.371?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.msgpack/msgpack@0.6.12?type=jar",
      "group": "org.msgpack",
      "name": "msgpack",
      "version": "0.6.12",
      "description": "MessagePack for Java is a binary-based efficient object\nserialization library in Java.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.msgpack/msgpack@0.6.12?type=jar",
      "externalReferences": [
        {
          "url": "scm:git:git://github.com/msgpack/msgpack-java.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
      "group": "com.googlecode.json-simple",
      "name": "json-simple",
      "version": "1.1.1",
      "description": "A simple Java toolkit for JSON",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://json-simple.googlecode.com/svn/trunk/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.1048?type=jar",
      "group": "com.github.seancorfield",
      "name": "next.jdbc",
      "version": "1.3.1048",
      "scope": "required",
      "purl": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.1048?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/java.data@1.3.113?type=jar",
      "group": "org.clojure",
      "name": "java.data",
      "version": "1.3.113",
      "description": "Utilities for working with Java beans from Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/java.data@1.3.113?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3?type=jar",
      "group": "camel-snake-kebab",
      "name": "camel-snake-kebab",
      "version": "0.4.3",
      "scope": "required",
      "purl": "pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/java.jdbc@0.7.12?type=jar",
      "group": "org.clojure",
      "name": "java.jdbc",
      "version": "0.7.12",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/java.jdbc@0.7.12?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/nano-id/nano-id@1.1.0?type=jar",
      "group": "nano-id",
      "name": "nano-id",
      "version": "1.1.0",
      "scope": "required",
      "purl": "pkg:maven/nano-id/nano-id@1.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/auth@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "auth",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - Auth module holds the classes that are used for authentication with services",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/auth@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth-aws-eventstream@2.44.9?type=jar",
      "group": "software.amazon.awssdk",
      "name": "http-auth-aws-eventstream",
      "version": "2.44.9",
      "description": "The AWS SDK for Java - HTTP Auth AWS Event Stream module contains interfaces and implementations for AWS\nspecific authentication of event streams in HTTP services.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.awssdk/http-auth-aws-eventstream@2.44.9?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar",
      "group": "software.amazon.eventstream",
      "name": "eventstream",
      "version": "1.0.1",
      "description": "The AWS Event Stream decoder library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/awslabs/aws-eventstream-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-commons/clj-yaml@1.0.29?type=jar",
      "group": "clj-commons",
      "name": "clj-yaml",
      "version": "1.0.29",
      "scope": "required",
      "purl": "pkg:maven/clj-commons/clj-yaml@1.0.29?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.3",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/funcool/promesa@11.0.678?type=jar",
      "group": "funcool",
      "name": "promesa",
      "version": "11.0.678",
      "scope": "required",
      "purl": "pkg:maven/funcool/promesa@11.0.678?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/cheshire/cheshire@6.0.0?type=jar",
      "group": "cheshire",
      "name": "cheshire",
      "version": "6.0.0",
      "scope": "required",
      "purl": "pkg:maven/cheshire/cheshire@6.0.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.18.3?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-smile",
      "version": "2.18.3",
      "description": "Support for reading and writing Smile (\"binary JSON\")\nencoded data using Jackson abstractions (streaming API, data binding,\ntree model)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.18.3?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.18.3",
      "description": "Support for reading and writing Concise Binary Object Representation\n([CBOR](https://www.rfc-editor.org/info/rfc7049)\nencoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tigris/tigris@0.1.2?type=jar",
      "group": "tigris",
      "name": "tigris",
      "version": "0.1.2",
      "scope": "required",
      "purl": "pkg:maven/tigris/tigris@0.1.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.7.1?type=jar",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.7.1",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.match@1.1.0?type=jar",
      "group": "org.clojure",
      "name": "core.match",
      "version": "1.1.0",
      "description": "Optimized pattern matching and predicate dispatch for Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.match@1.1.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/clojure/core.match",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "3.9.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.6-4",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "group": "org.lz4",
      "name": "lz4-java",
      "version": "1.8.0",
      "description": "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "git://github.com/lz4/lz4-java.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.5",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.reader@1.5.2?type=jar",
      "group": "org.clojure",
      "name": "tools.reader",
      "version": "1.5.2",
      "description": "A Clojure reader in Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.reader@1.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/tools.reader",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ehrbase.openehr.sdk/opt-1.4@2.25.0?type=jar",
      "group": "org.ehrbase.openehr.sdk",
      "name": "opt-1.4",
      "version": "2.25.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.ehrbase.openehr.sdk/opt-1.4@2.25.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.xmlbeans/xmlbeans@3.1.0?type=jar",
      "publisher": "XmlBeans",
      "group": "org.apache.xmlbeans",
      "name": "xmlbeans",
      "version": "3.1.0",
      "description": "XmlBeans main jar",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.xmlbeans/xmlbeans@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/repos/asf/xmlbeans/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.babashka/sci@0.10.46?type=jar",
      "group": "org.babashka",
      "name": "sci",
      "version": "0.10.46",
      "scope": "required",
      "purl": "pkg:maven/org.babashka/sci@0.10.46?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/borkdude/sci.impl.reflector@0.0.5?type=jar",
      "group": "borkdude",
      "name": "sci.impl.reflector",
      "version": "0.0.5",
      "scope": "required",
      "purl": "pkg:maven/borkdude/sci.impl.reflector@0.0.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.babashka/sci.impl.types@0.0.2?type=jar",
      "group": "org.babashka",
      "name": "sci.impl.types",
      "version": "0.0.2",
      "scope": "required",
      "purl": "pkg:maven/org.babashka/sci.impl.types@0.0.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/borkdude/graal.locking@0.0.2?type=jar",
      "group": "borkdude",
      "name": "graal.locking",
      "version": "0.0.2",
      "scope": "required",
      "purl": "pkg:maven/borkdude/graal.locking@0.0.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.weavejester/medley@1.8.1?type=jar",
      "group": "dev.weavejester",
      "name": "medley",
      "version": "1.8.1",
      "scope": "required",
      "purl": "pkg:maven/dev.weavejester/medley@1.8.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.rpl/specter@1.1.4?type=jar",
      "group": "com.rpl",
      "name": "specter",
      "version": "1.1.4",
      "scope": "required",
      "purl": "pkg:maven/com.rpl/specter@1.1.4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/riddley/riddley@0.1.12?type=jar",
      "group": "riddley",
      "name": "riddley",
      "version": "0.1.12",
      "scope": "required",
      "purl": "pkg:maven/riddley/riddley@0.1.12?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.2?type=jar",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4.2",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.forward/yaml@1.0.11?type=jar",
      "group": "io.forward",
      "name": "yaml",
      "version": "1.0.11",
      "scope": "required",
      "purl": "pkg:maven/io.forward/yaml@1.0.11?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/metosin/jsonista@0.3.13?type=jar",
      "group": "metosin",
      "name": "jsonista",
      "version": "0.3.13",
      "scope": "required",
      "purl": "pkg:maven/metosin/jsonista@0.3.13?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.18.2",
      "description": "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "scope": "required",
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/hawk/hawk@0.2.11?type=jar",
      "group": "hawk",
      "name": "hawk",
      "version": "0.2.11",
      "scope": "required",
      "purl": "pkg:maven/hawk/hawk@0.2.11?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.incongru.watchservice/barbary-watchservice@1.0?type=jar",
      "group": "net.incongru.watchservice",
      "name": "barbary-watchservice",
      "version": "1.0",
      "description": "An implementation of Java 7’s WatchService for Java 6 on Mac OS X",
      "scope": "required",
      "licenses": [
        {
          "expression": "GPLv2 + Classpath Exception"
        }
      ],
      "purl": "pkg:maven/net.incongru.watchservice/barbary-watchservice@1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/gjoseph/BarbaryWatchService",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring@1.15.3?type=jar",
      "group": "ring",
      "name": "ring",
      "version": "1.15.3",
      "scope": "required",
      "purl": "pkg:maven/ring/ring@1.15.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-devel@1.15.3?type=jar",
      "group": "ring",
      "name": "ring-devel",
      "version": "1.15.3",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-devel@1.15.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-stacktrace/clj-stacktrace@0.2.8?type=jar",
      "group": "clj-stacktrace",
      "name": "clj-stacktrace",
      "version": "0.2.8",
      "scope": "required",
      "purl": "pkg:maven/clj-stacktrace/clj-stacktrace@0.2.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ns-tracker/ns-tracker@1.0.0?type=jar",
      "group": "ns-tracker",
      "name": "ns-tracker",
      "version": "1.0.0",
      "scope": "required",
      "purl": "pkg:maven/ns-tracker/ns-tracker@1.0.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.namespace@1.5.0?type=jar",
      "group": "org.clojure",
      "name": "tools.namespace",
      "version": "1.5.0",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.namespace@1.5.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/java.classpath@1.1.0?type=jar",
      "group": "org.clojure",
      "name": "java.classpath",
      "version": "1.1.0",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/java.classpath@1.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ring/ring-jetty-adapter@1.15.3?type=jar",
      "group": "ring",
      "name": "ring-jetty-adapter",
      "version": "1.15.3",
      "scope": "required",
      "purl": "pkg:maven/ring/ring-jetty-adapter@1.15.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-unixdomain-server@12.1.0?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-unixdomain-server",
      "version": "12.1.0",
      "description": "Jetty Unix-Domain Sockets Server",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-unixdomain-server@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-servlet@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9",
      "name": "jetty-ee9-servlet",
      "version": "12.1.0",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-servlet@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-nested@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9",
      "name": "jetty-ee9-nested",
      "version": "12.1.0",
      "description": "The jetty core handler adapted to legacy ee9 handler.",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-nested@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.0?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.0",
      "description": "The common Jetty security implementation",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.0?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.0",
      "description": "The common jetty session implementation",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-security@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9",
      "name": "jetty-ee9-security",
      "version": "12.1.0",
      "description": "Jetty security infrastructure",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-security@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9.websocket",
      "name": "jetty-ee9-websocket-jetty-server",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-webapp@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9",
      "name": "jetty-ee9-webapp",
      "version": "12.1.0",
      "description": "Jetty web application support",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-webapp@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.0?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-xml",
      "version": "12.1.0",
      "description": "The jetty xml utilities.",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee",
      "name": "jetty-ee-webapp",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-api@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9.websocket",
      "name": "jetty-ee9-websocket-jetty-api",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-api@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-common@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9.websocket",
      "name": "jetty-ee9-websocket-jetty-common",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-common@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-common@12.1.0?type=jar",
      "group": "org.eclipse.jetty.websocket",
      "name": "jetty-websocket-core-common",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-common@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.1.0?type=jar",
      "group": "org.eclipse.jetty.ee9.websocket",
      "name": "jetty-ee9-websocket-servlet",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-server@12.1.0?type=jar",
      "group": "org.eclipse.jetty.websocket",
      "name": "jetty-websocket-core-server",
      "version": "12.1.0",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-server@12.1.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar",
      "publisher": "Mort Bay Consulting",
      "group": "org.eclipse.jetty.toolchain",
      "name": "jetty-jakarta-servlet-api",
      "version": "5.0.2",
      "description": "The Eclipse Jetty Toolchain Parent",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse/jetty.toolchain/tree/master/jetty-jakarta-servlet-api",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ring-clojure/ring-jakarta-servlet@1.15.3?type=jar",
      "group": "org.ring-clojure",
      "name": "ring-jakarta-servlet",
      "version": "1.15.3",
      "scope": "required",
      "purl": "pkg:maven/org.ring-clojure/ring-jakarta-servlet@1.15.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/data.priority-map@1.2.0?type=jar",
      "group": "org.clojure",
      "name": "data.priority-map",
      "version": "1.2.0",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/data.priority-map@1.2.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.0",
      "description": "A high performance caching library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/web-template@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "web-template",
      "version": "4.2.0",
      "description": "WebTemplate implementation for openEHR CDR",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/web-template@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/web-template/tree/master/",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.20?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-reflect",
      "version": "1.9.20",
      "description": "Kotlin Full Reflection Library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.20?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "1.9.20",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.20?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib-jdk8",
      "version": "1.9.20",
      "description": "Kotlin Standard Library JDK 8 extension",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.20?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib-jdk7",
      "version": "1.9.20",
      "description": "Kotlin Standard Library JDK 7 extension",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@23.1.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "23.1.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@23.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/java-annotations",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-model@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-model",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-model@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-utils@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-utils",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-utils@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.5?type=jar",
      "publisher": "Joda.org",
      "group": "joda-time",
      "name": "joda-time",
      "version": "2.12.5",
      "description": "Date and time library to replace JDK date handling",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JodaOrg/joda-time",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-time@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-time",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-time@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-json-jackson@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-json-jackson",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-json-jackson@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.18.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-kotlin@2.18.3?type=jar",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-kotlin",
      "version": "2.18.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson/) to support\nKotlin language, specifically introspection of method/constructor parameter names,\nwithout having to add explicit property name annotation.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-kotlin@2.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-module-kotlin",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-terminology@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-terminology",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-terminology@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-xml-jaxb@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-xml-jaxb",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-xml-jaxb@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-path@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-path",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-path@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/care.better.platform/ehr-common-amnode@4.2.0?type=jar",
      "group": "care.better.platform",
      "name": "ehr-common-amnode",
      "version": "4.2.0",
      "description": "Common components of an openEHR-based system, like a Clinical Data Repository",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/care.better.platform/ehr-common-amnode@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/better-care/ehr-common/tree/master",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.18.3?type=jar",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-joda",
      "version": "2.18.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support Joda (https://www.joda.org/joda-time/) data types.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-datatype-joda",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "version": "2.3.6",
      "description": "JAXB (JSR 222) Reference Implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "version": "2.3.6",
      "description": "TXW is a library that allows you to write XML documents.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "group": "com.sun.istack",
      "name": "istack-commons-runtime",
      "version": "3.0.12",
      "description": "istack common utility code",
      "scope": "required",
      "licenses": [
        {
          "expression": "Eclipse Distribution License - v 1.0"
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.8?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.8",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.8?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.8",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.8?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.8",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.8?type=jar",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.8",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.8?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.graphql-java/graphql-java@24.3?type=jar",
      "group": "com.graphql-java",
      "name": "graphql-java",
      "version": "24.3",
      "description": "GraphqL Java",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.graphql-java/graphql-java@24.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/graphql-java/graphql-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.graphql-java/java-dataloader@5.0.3?type=jar",
      "group": "com.graphql-java",
      "name": "java-dataloader",
      "version": "5.0.3",
      "description": "A pure Java 11 port of Facebook Dataloader",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.graphql-java/java-dataloader@5.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/graphql-java/java-dataloader",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar",
      "group": "org.reactivestreams",
      "name": "reactive-streams",
      "version": "1.0.3",
      "description": "A Protocol for Asynchronous Non-Blocking Data Sequence",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/co.elastic.apm/apm-agent-api@1.54.0?type=jar",
      "publisher": "Elastic Inc.",
      "group": "co.elastic.apm",
      "name": "apm-agent-api",
      "version": "1.54.0",
      "description": "APM for Java applications with the Elastic stack",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/co.elastic.apm/apm-agent-api@1.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/elastic/apm-agent-java",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/garden/garden@1.3.10?type=jar",
      "group": "garden",
      "name": "garden",
      "version": "1.3.10",
      "scope": "required",
      "purl": "pkg:maven/garden/garden@1.3.10?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.yahoo.platform.yui/yuicompressor@2.4.8?type=jar",
      "group": "com.yahoo.platform.yui",
      "name": "yuicompressor",
      "version": "2.4.8",
      "description": "The YUI Compressor is a JavaScript compressor which, in addition to removing\ncomments and white-spaces, obfuscates local variables using the smallest\npossible variable name. This obfuscation is safe, even when using constructs\nsuch as 'eval' or 'with' (although the compression is not optimal is those\ncases) Compared to jsmin, the average savings is around 20%.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:maven/com.yahoo.platform.yui/yuicompressor@2.4.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/yui/yuicompressor",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.async@1.9.808-alpha1?type=jar",
      "group": "org.clojure",
      "name": "core.async",
      "version": "1.9.808-alpha1",
      "description": "Facilities for async programming and communication in Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.async@1.9.808-alpha1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.async",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2?type=jar",
      "group": "org.clojure",
      "name": "tools.analyzer.jvm",
      "version": "1.3.2",
      "description": "Additional jvm-specific passes for tools.analyzer",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/tools.analyzer.jvm",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.analyzer@1.2.0?type=jar",
      "group": "org.clojure",
      "name": "tools.analyzer",
      "version": "1.2.0",
      "description": "An analyzer for Clojure code, written in Clojure and producing AST in EDN",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.analyzer@1.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/tools.analyzer",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.memoize@1.1.266?type=jar",
      "group": "org.clojure",
      "name": "core.memoize",
      "version": "1.1.266",
      "description": "A memoization library for Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.memoize@1.1.266?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.memoize",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.cache@1.1.234?type=jar",
      "group": "org.clojure",
      "name": "core.cache",
      "version": "1.1.234",
      "description": "Cache library for Clojure.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.cache@1.1.234?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.cache",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/juji/editscript@0.6.6?type=jar",
      "group": "juji",
      "name": "editscript",
      "version": "0.6.6",
      "scope": "required",
      "purl": "pkg:maven/juji/editscript@0.6.6?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/http-kit/http-kit@2.9.0-beta2?type=jar",
      "group": "http-kit",
      "name": "http-kit",
      "version": "2.9.0-beta2",
      "scope": "required",
      "purl": "pkg:maven/http-kit/http-kit@2.9.0-beta2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/clojure@1.11.1?type=jar",
      "group": "org.clojure",
      "name": "clojure",
      "version": "1.11.1",
      "description": "Clojure core environment and runtime library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/clojure@1.11.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/spec.alpha@0.3.218?type=jar",
      "group": "org.clojure",
      "name": "spec.alpha",
      "version": "0.3.218",
      "description": "Specification of data and functions",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/spec.alpha@0.3.218?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/spec.alpha",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.specs.alpha@0.2.62?type=jar",
      "group": "org.clojure",
      "name": "core.specs.alpha",
      "version": "0.2.62",
      "description": "Specs for clojure.core",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.specs.alpha@0.2.62?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.specs.alpha",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            },
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/healthsamurai/matcho@0.3.10?type=jar",
      "group": "healthsamurai",
      "name": "matcho",
      "version": "0.3.10",
      "scope": "required",
      "purl": "pkg:maven/healthsamurai/matcho@0.3.10?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/borkdude/edamame@1.3.22?type=jar",
      "group": "borkdude",
      "name": "edamame",
      "version": "1.3.22",
      "scope": "required",
      "purl": "pkg:maven/borkdude/edamame@1.3.22?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.reader@1.3.4?type=jar",
      "group": "org.clojure",
      "name": "tools.reader",
      "version": "1.3.4",
      "description": "A Clojure reader in Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.reader@1.3.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/clojure/tools.reader",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.java.dev.jna/jna@3.2.2?type=jar",
      "group": "net.java.dev.jna",
      "name": "jna",
      "version": "3.2.2",
      "scope": "required",
      "purl": "pkg:maven/net.java.dev.jna/jna@3.2.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/zen/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/cli-matic/cli-matic@0.5.4?type=jar",
      "group": "cli-matic",
      "name": "cli-matic",
      "version": "0.5.4",
      "scope": "required",
      "purl": "pkg:maven/cli-matic/cli-matic@0.5.4?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.cli@1.0.206?type=jar",
      "group": "org.clojure",
      "name": "tools.cli",
      "version": "1.0.206",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.cli@1.0.206?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/expound/expound@0.9.0?type=jar",
      "group": "expound",
      "name": "expound",
      "version": "0.9.0",
      "scope": "required",
      "purl": "pkg:maven/expound/expound@0.9.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.5.1",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.5.0",
      "description": "Checker Qual is the set of annotations (qualifiers) and supporting classes\nused by the Checker Framework to type check Java source code.\nPlease\nsee artifact:\norg.checkerframework:checker",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/fipp/fipp@0.6.26?type=jar",
      "group": "fipp",
      "name": "fipp",
      "version": "0.6.26",
      "scope": "required",
      "purl": "pkg:maven/fipp/fipp@0.6.26?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/core.rrb-vector@0.1.2?type=jar",
      "group": "org.clojure",
      "name": "core.rrb-vector",
      "version": "0.1.2",
      "description": "RRB-Trees for Clojure(Script) -- see Bagwell & Rompf",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/core.rrb-vector@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/clojure/core.rrb-vector",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-http/clj-http@3.12.3?type=jar",
      "group": "clj-http",
      "name": "clj-http",
      "version": "3.12.3",
      "scope": "required",
      "purl": "pkg:maven/clj-http/clj-http@3.12.3?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.14",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.13",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient-cache",
      "version": "4.5.13",
      "description": "Apache HttpComponents HttpClient - Cache",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.13?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpasyncclient",
      "version": "4.1.4",
      "description": "Apache HttpComponents AsyncClient",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/repos/asf/httpcomponents/httpasyncclient/branches/4.1.x",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.10?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore-nio",
      "version": "4.4.10",
      "description": "Apache HttpComponents Core (non-blocking I/O)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.10?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.13",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.15",
      "description": "The Apache Commons Codec package contains simple encoder and decoders for\nvarious formats such as Base64 and Hexadecimal. In addition to these\nwidely used encoders and decoders, the codec package also maintains a\ncollection of phonetic encoding utilities.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.8.0?type=jar",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.8.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters,\nfile comparators, endian transformation classes, and much more.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/potemkin/potemkin@0.4.5?type=jar",
      "group": "potemkin",
      "name": "potemkin",
      "version": "0.4.5",
      "scope": "required",
      "purl": "pkg:maven/potemkin/potemkin@0.4.5?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/clj-tuple/clj-tuple@0.2.2?type=jar",
      "group": "clj-tuple",
      "name": "clj-tuple",
      "version": "0.2.2",
      "scope": "required",
      "purl": "pkg:maven/clj-tuple/clj-tuple@0.2.2?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/data.csv@1.0.1?type=jar",
      "group": "org.clojure",
      "name": "data.csv",
      "version": "1.0.1",
      "description": "A Clojure library for reading and writing comma separated value (csv) files",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/data.csv@1.0.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.834?type=jar",
      "group": "com.github.seancorfield",
      "name": "next.jdbc",
      "version": "1.3.834",
      "scope": "required",
      "purl": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.834?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/java.data@1.0.95?type=jar",
      "group": "org.clojure",
      "name": "java.data",
      "version": "1.0.95",
      "description": "Utilities for working with Java beans from Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/java.data@1.0.95?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.clojure/tools.logging@1.2.1?type=jar",
      "group": "org.clojure",
      "name": "tools.logging",
      "version": "1.2.1",
      "description": "Parent POM for projects contributed to Clojure",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0",
            "url": "https://opensource.org/licenses/EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.clojure/tools.logging@1.2.1?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/cheshire/cheshire@5.11.0?type=jar",
      "group": "cheshire",
      "name": "cheshire",
      "version": "5.11.0",
      "scope": "required",
      "purl": "pkg:maven/cheshire/cheshire@5.11.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.13.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.13.3?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-smile",
      "version": "2.13.3",
      "description": "Support for reading and writing Smile (\"binary JSON\")\nencoded data using Jackson abstractions (streaming API, data binding,\ntree model)",
      "scope": "required",
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.13.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-dataformats-binary",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.13.3?type=jar",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.13.3",
      "description": "Support for reading and writing Concise Binary Object Representation\n([CBOR](https://www.rfc-editor.org/info/rfc7049)\nencoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.13.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-dataformats-binary",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial/sqlite-jdbc@3.39.3.0?type=jar",
      "group": "org.xerial",
      "name": "sqlite-jdbc",
      "version": "3.39.3.0",
      "description": "SQLite JDBC library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial/sqlite-jdbc@3.39.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/sqlite-jdbc",
          "type": "vcs"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/http-kit/http-kit@2.6.0?type=jar",
      "group": "http-kit",
      "name": "http-kit",
      "version": "2.6.0",
      "scope": "required",
      "purl": "pkg:maven/http-kit/http-kit@2.6.0?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir/pom.xml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 0.5,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 0.5,
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      }
    },
    {
      "type": "application",
      "bom-ref": "pkg:maven/Aidbox/Aidbox@edge?type=jar",
      "group": "Aidbox",
      "name": "Aidbox",
      "version": "edge",
      "purl": "pkg:maven/Aidbox/Aidbox@edge?type=jar",
      "properties": [
        {
          "name": "SrcFile",
          "value": "/drone/src/box/pom.xml"
        }
      ],
      "components": [
        {
          "type": "application",
          "bom-ref": "pkg:maven/zen-lang/zen@0.0.1-SNAPSHOT?type=jar",
          "group": "zen-lang",
          "name": "zen",
          "version": "0.0.1-SNAPSHOT",
          "purl": "pkg:maven/zen-lang/zen@0.0.1-SNAPSHOT?type=jar",
          "properties": [
            {
              "name": "SrcFile",
              "value": "/drone/src/box/libs/zen/pom.xml"
            }
          ]
        },
        {
          "type": "application",
          "bom-ref": "pkg:maven/zen-lang/zen-doc@0.0.1-SNAPSHOT?type=jar",
          "group": "zen-lang",
          "name": "zen-doc",
          "version": "0.0.1-SNAPSHOT",
          "purl": "pkg:maven/zen-lang/zen-doc@0.0.1-SNAPSHOT?type=jar",
          "properties": [
            {
              "name": "SrcFile",
              "value": "/drone/src/box/libs/fhir/pom.xml"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/autocomplete@6.18.4",
      "group": "@codemirror",
      "name": "autocomplete",
      "version": "6.18.4",
      "description": "Autocompletion for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b05029846408ab24197cfd9906c48757bc50be8f4fcb4ad5d1d5bb5b720c45d4becc3b8d6f69779e8efc0af51a58a19fcc58c8e054eb2dd5128fce8819bda144"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/autocomplete@6.18.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/autocomplete/-/autocomplete-6.18.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/autocomplete/-/autocomplete-6.18.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:49:07.174Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-03T14:51:17.528Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-17T16:12:55.142Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "89"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "34.38"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "10.88"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "78"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.16"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.18.3"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-11-13T07:06:04.781Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-sFAphGQIqyQZfP2ZBsSHV7xQvo9Py0rV0dW7W3IMRdS+zDuNb2l3no78CvUaWKGfzFjI4FTrLdUSj86IGb2hRA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "4394f55d6771727179f2e28a871ef46bbbeb11b1"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/autocomplete,autocompletion,@codemirror/autocomplete/autocompletion,closeBrackets,@codemirror/autocomplete/closeBrackets,closeBracketsKeymap,@codemirror/autocomplete/closeBracketsKeymap,completionKeymap,@codemirror/autocomplete/completionKeymap,Completion,@codemirror/autocomplete/Completion,CompletionContext,@codemirror/autocomplete/CompletionContext,CompletionResult,@codemirror/autocomplete/CompletionResult,CompletionSource,@codemirror/autocomplete/CompletionSource,completionStatus,@codemirror/autocomplete/completionStatus,startCompletion,@codemirror/autocomplete/startCompletion,acceptCompletion,@codemirror/autocomplete/acceptCompletion,moveCompletionSelection,@codemirror/autocomplete/moveCompletionSelection,closeCompletion,@codemirror/autocomplete/closeCompletion"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/commands@6.8.0",
      "group": "@codemirror",
      "name": "commands",
      "version": "6.8.0",
      "description": "Collection of editing commands for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abc54f1056843f88a44a5b7a6718c1df35bbdbeee8b1f0185bd8bc66ef78deea9b2aecfabad735f85d7bd21c8b502525b573918d05d1c9840d7e4724cc0fdb3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/commands@6.8.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/commands/-/commands-6.8.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/commands/-/commands-6.8.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:39:18.824Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T12:43:10.938Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-01-08T16:26:26.777Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "50"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "79.29"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "24.00"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "42"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.30"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.7.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-10-21T09:33:42.027Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-q8VPEFaEP4ikSlt6ZxjB3zW72+7osfAYW9i8Zu943uqbKuz6utc1+F170hyLUCUltXORjQXRyYQNfkckzA/bPQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "92f200b66f852939bd6ebb90d48c2d9e9c813d64"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/commands,defaultKeymap,@codemirror/commands/defaultKeymap,history,@codemirror/commands/history,historyKeymap,@codemirror/commands/historyKeymap,indentLess,@codemirror/commands/indentLess,insertTab,@codemirror/commands/insertTab"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/lang-json@6.0.1",
      "group": "@codemirror",
      "name": "lang-json",
      "version": "6.0.1",
      "description": "JSON language support for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f93d5f947760a6a0c39496762e48a5feb2e2472ebce1630b73be315278c91f8f0641d7c9a3fa6e7654d1ade6662b0ccff3fb4674a7fcdf095b01d382ce524e19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/lang-json@6.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/lang-json/-/lang-json-6.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/lang-json/-/lang-json-6.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:50:38.838Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T12:38:41.067Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-10-24T11:55:42.455Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "138.20"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "55.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "7"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "2.47"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.0.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-06-08T07:08:49.011Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-+T1flHdgpqDDlJZ2Lkil/rLiRy684WMLc74xUnjJH48GQdfJo/pudlTRreZmKwzP8/tGdKf83wlbAdOCzlJOGQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "0a0be701a5619c4b0f8991f9b5e95fe33f462330"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/lang-json,jsonLanguage,@codemirror/lang-json/jsonLanguage,json,@codemirror/lang-json/json,jsonParseLinter,@codemirror/lang-json/jsonParseLinter"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-schema.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/language@6.0.0",
      "group": "@codemirror",
      "name": "language",
      "version": "6.0.0",
      "description": "Language support infrastructure for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aed8e4e627f23333a76b573b3c1bbb275542b743ef039c32de8f1e3159f130a6fbcfc280ec915e72f0f4e1d4a7d78be3fdb05a01ba91b0679de4e8eda1f1272c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/language@6.0.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/language/-/language-6.0.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/language/-/language-6.0.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:44:09.644Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T12:38:44.702Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-06-08T07:07:59.273Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijnh@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "56"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "19.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "10.43"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "22"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.82"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.20.2"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-05-20T07:14:03.443Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-rtjk5ifyMzOna1c7PBu7J1VCt0PvA5wy3o8eMVnxMKb7z8KA7JFecvD04dSn14vj/bBaAbqRsGed5OjtofEnLA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "f590558447c01f430fb3ef3297c41b8cd3ae9190"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/language,bracketMatching,@codemirror/language/bracketMatching,defaultHighlightStyle,@codemirror/language/defaultHighlightStyle,foldGutter,@codemirror/language/foldGutter,foldKeymap,@codemirror/language/foldKeymap,indentOnInput,@codemirror/language/indentOnInput,syntaxHighlighting,@codemirror/language/syntaxHighlighting,ensureSyntaxTree,@codemirror/language/ensureSyntaxTree,syntaxTree,@codemirror/language/syntaxTree,foldInside,@codemirror/language/foldInside,foldNodeProp,@codemirror/language/foldNodeProp,Language,@codemirror/language/Language,LanguageSupport,@codemirror/language/LanguageSupport,LRLanguage,@codemirror/language/LRLanguage,HighlightStyle,@codemirror/language/HighlightStyle,indentUnit,@codemirror/language/indentUnit"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/language@6.10.8",
      "group": "@codemirror",
      "name": "language",
      "version": "6.10.8",
      "description": "Language support infrastructure for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1c3fc5cf3e10c7daf4ea7f5f3553c31b6675beb43c8f632d14cd539afa81ce463c93fa6861a26f6f05dedd029270a03cfd35bfdaf241e3248b2e03fb7cbcd17"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/language@6.10.8",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/language/-/language-6.10.8.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/language/-/language-6.10.8.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:44:09.644Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T12:38:44.702Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-23T16:51:17.669Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "56"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "6.35"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "24.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "46"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.26"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.10.7"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-12-17T08:22:50.872Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:compressedCadence",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-wcP8XPPhDH2vTqf181U8MbZnW+tDyPYy0UzVOa+oHORjyT+mhhom9vBd7dApJwoDz9Nb/a8kHjJIsuA/t8vNFw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "3e3a346a2b0a8cf63ee1cfe03349eb1965dce5f9"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/language,bracketMatching,@codemirror/language/bracketMatching,defaultHighlightStyle,@codemirror/language/defaultHighlightStyle,foldGutter,@codemirror/language/foldGutter,foldKeymap,@codemirror/language/foldKeymap,indentOnInput,@codemirror/language/indentOnInput,syntaxHighlighting,@codemirror/language/syntaxHighlighting,ensureSyntaxTree,@codemirror/language/ensureSyntaxTree,syntaxTree,@codemirror/language/syntaxTree,foldInside,@codemirror/language/foldInside,foldNodeProp,@codemirror/language/foldNodeProp,Language,@codemirror/language/Language,LanguageSupport,@codemirror/language/LanguageSupport,LRLanguage,@codemirror/language/LRLanguage,HighlightStyle,@codemirror/language/HighlightStyle,indentUnit,@codemirror/language/indentUnit"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/lint@6.8.4",
      "group": "@codemirror",
      "name": "lint",
      "version": "6.8.4",
      "description": "Linting support for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb8abb3e7665254a237917bc1496bf9e325c31cb4848680f4383e75ac77ddbaf11e194ed53eb5f1589b0901be072b2b6f9043cb5815500b55be5f549ca429ce4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/lint@6.8.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/lint/-/lint-6.8.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/lint/-/lint-6.8.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:48:07.490Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-09T08:00:06.469Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-11-28T09:16:54.139Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "48"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "6.97"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "24.04"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "37"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.29"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.8.3"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-11-21T10:02:59.261Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:compressedCadence",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-u4q7PnZlJUojeRe8FJa/njJcMctISGgPQ4PnWsd9268R4ZTtU+tfFYmwkBvgcrK2+QQ8tYFVALVb5fVJykKc5A=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "7d8aa5d1a6dec89ffcc23ad45ddca2e12e90982d"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/lint,lintKeymap,@codemirror/lint/lintKeymap,linter,@codemirror/lint/linter"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-schema.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/search@6.5.8",
      "group": "@codemirror",
      "name": "search",
      "version": "6.5.8",
      "description": "Search functionality for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e85ad66fa3b7355c57995a69b268ea761b45d56ce9e6f9f273be086a18092d056ddcb9fc09516bd209c346d29a5788110cd39999bba46132d5cfbf68699658a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/search@6.5.8",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/search/-/search-6.5.8.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/search/-/search-6.5.8.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:46:44.836Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-16T17:00:39.089Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-11-22T08:14:08.044Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "44"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "21.16"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "25.68"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "36"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.82"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.5.7"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-11-01T04:24:10.787Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-PoWtZvo7c1XFeZWmmyaOp2G0XVbOnm+fJzvghqGAktBW3cufwJUWvSCcNG0ppXiBEM05mZu6RhMtXPv2hpllig=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "b59b3659b46184cc75d6108d7c050a4ca344c3a0"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/search,highlightSelectionMatches,@codemirror/search/highlightSelectionMatches,searchKeymap,@codemirror/search/searchKeymap,closeSearchPanel,@codemirror/search/closeSearchPanel,findNext,@codemirror/search/findNext,findPrevious,@codemirror/search/findPrevious,getSearchQuery,@codemirror/search/getSearchQuery,SearchQuery,@codemirror/search/SearchQuery,search,@codemirror/search/search,setSearchQuery,@codemirror/search/setSearchQuery"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/state@6.5.0",
      "group": "@codemirror",
      "name": "state",
      "version": "6.5.0",
      "description": "Editor state data structures for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33004754aeb42222070dca0c7adefc971b7a8b0e6024e1926cd6ce2150475955c81f8fcdab5f864202cb1a02352a59cdf3a5835ec3ee7556aa607281231ec4cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/state@6.5.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/state/-/state-6.5.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/state/-/state-6.5.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:36:08.554Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T12:38:50.957Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-09T12:26:28.029Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "44"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "293.93"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "13.30"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "37"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "22.09"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.4.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-02-19T14:00:46.394Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-MwBHVK60IiIHDcoMet78lxt6iw5gJOGSbNbOIVBHWVXIH4/Nq1+GQgLLGgI1KlnN86WDXsPudVaqYHKBIx7Eyw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "e98dde85620618651543152fe1c2483300a0ccc9"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/state,Compartment,@codemirror/state/Compartment,EditorState,@codemirror/state/EditorState,Extension,@codemirror/state/Extension,RangeSet,@codemirror/state/RangeSet,StateEffect,@codemirror/state/StateEffect,StateField,@codemirror/state/StateField,RangeSetBuilder,@codemirror/state/RangeSetBuilder,Prec,@codemirror/state/Prec,EditorSelection,@codemirror/state/EditorSelection"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-schema.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-lsp-context.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/db-console.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40codemirror/view@6.36.1",
      "group": "@codemirror",
      "name": "view",
      "version": "6.36.1",
      "description": "DOM view component for the CodeMirror code editor",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a20f59f24f89b8ba8a5968374edae5d4fcb2c796228d60bf640750b5c091ebba71cb9bfae991be50552a24aa0c3d845a8465a92b7656ff546597f1a6194ec95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40codemirror/view@6.36.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@codemirror/view/-/view-6.36.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@codemirror/view/-/view-6.36.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-29T19:36:42.080Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-09T08:00:22.947Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-19T14:20:00.431Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "adrianheine, mail@adrianheine.de, marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "246"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1.92"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "4.98"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "195"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.39"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.36.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-12-17T16:14:31.525Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-miD1nyT4m4uopZaDdO2uXU/LLHliKNYL9kB1C1wJHrunHLm/rpkb5QVSokqgw9hFqEZakrdlb/VGWX8aYZTslQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "3c543b8fd72c96b30c4b2b1464d1ebce7e0c5c4b"
        },
        {
          "name": "ImportedModules",
          "value": "@codemirror/view,crosshairCursor,@codemirror/view/crosshairCursor,drawSelection,@codemirror/view/drawSelection,dropCursor,@codemirror/view/dropCursor,EditorView,@codemirror/view/EditorView,highlightActiveLine,@codemirror/view/highlightActiveLine,highlightActiveLineGutter,@codemirror/view/highlightActiveLineGutter,highlightSpecialChars,@codemirror/view/highlightSpecialChars,keymap,@codemirror/view/keymap,lineNumbers,@codemirror/view/lineNumbers,rectangularSelection,@codemirror/view/rectangularSelection,Decoration,@codemirror/view/Decoration,GutterMarker,@codemirror/view/GutterMarker,gutterLineClass,@codemirror/view/gutterLineClass,ViewPlugin,@codemirror/view/ViewPlugin,ViewUpdate,@codemirror/view/ViewUpdate,DecorationSet,@codemirror/view/DecorationSet,Command,@codemirror/view/Command,placeholder,@codemirror/view/placeholder,tooltips,@codemirror/view/tooltips"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/example/main.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/fhir-autocomplete.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/sql-completion.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/db-console.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40floating-ui/react-dom@2.1.2",
      "group": "@floating-ui",
      "name": "react-dom",
      "version": "2.1.2",
      "description": "Floating UI for React DOM",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3aa24af97203f330d072f9872c7b603ab9d322e1bab05bfce0045febc2370da96932afcd8c720f1bd2f8d7f0e269645cbf14a8c99b0eb057bb78e242ba916ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40floating-ui/react-dom@2.1.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@floating-ui/react-dom/-/react-dom-2.1.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@floating-ui/react-dom/-/react-dom-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-12-01T15:20:42.904Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-03-03T03:02:08.888Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-09-15T06:07:45.903Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "atomiks"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "fezvrasta, federico.zivolo@gmail.com, atomiks, cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "atomiks, cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.50"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "51"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "82.17"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "9.99"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "43"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "8.22"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-06-25T02:09:19.217Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "atomiks"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-06okr5cgPzMNBy+Ycse2A6udMi4bqwW/zgBF/rwjcNqWkyr82Mcg8b0vjX8OJpZFy/FKjJmw6wV7t44kK6kW7A=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "a1349bbf6a0e5cb5ded55d023766f20a4d439a31"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40floating-ui/react@0.27.8",
      "group": "@floating-ui",
      "name": "react",
      "version": "0.27.8",
      "description": "Floating UI for React",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1102784e1df6f32db0c874772b33943a84d6d942a3164e777e6c9a85fc04c67150f2f9ec318a8a73e7c53ce91e62d8f9b5ca750d4322349ec116179dedef4e37"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40floating-ui/react@0.27.8",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@floating-ui/react/-/react-0.27.8.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@floating-ui/react/-/react-0.27.8.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-12-10T23:48:31.423Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-03-03T03:02:09.960Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-04-23T04:01:04.491Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "atomiks"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "fezvrasta, federico.zivolo@gmail.com, atomiks, cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "fezvrasta, federico.zivolo@gmail.com, atomiks, cc.glows@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "83"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "12.86"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "10.31"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "70"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.25"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.27.7"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-04-10T07:24:56.090Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "atomiks"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-EQJ4Th328y2wyHR3KzOUOoTW2UKjFk53fmyahfwExnFQ8vnsMYqKc+fFPOkeYtj5tcp1DUMiNJ7BFhed7e9ONw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "6d7f4bf7bfe2065934ba18d54f7383b777f87dd5"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/core@0.0.30",
      "group": "@git-diff-view",
      "name": "core",
      "version": "0.0.30",
      "description": "@git-diff-view/core",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b2622ff2d6ae78dda61e5903bd73ed5ac1f461e3b74f17b9f848d410565e48e94d8d1f80ad83c78e37a7b66c811de1da26fdac19d476fc913bda7ac0697f124"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/core@0.0.30",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/core/-/core-0.0.30.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/core/-/core-0.0.30.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-01-30T02:28:04.512Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:11.499Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-07-08T07:41:46.212Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "47"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1.58"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "7.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "29"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.20"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.29"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-07-06T17:46:49.475Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-CyYi/y1q543aYeWQO9c+1awfRh47dPF7n4SNQQVl5I6U2NH4Ctg8eON6e2bIEd4dom/awZ1Hb8kTvaesBpfxJA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "049d2bce685a9afd6c0a80e7c1a903e961be4202"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/core@0.0.36",
      "group": "@git-diff-view",
      "name": "core",
      "version": "0.0.36",
      "description": "@git-diff-view/core",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03798ddb50bf65d209cf427dfcf499bcb47574b06ef011b5ded544fb0e00f6ff1d2d2e689a4a105631ccf4ae466a826275e3212bfd75cba57b08c6cc5c23d0a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/core@0.0.36",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/core/-/core-0.0.36.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/core/-/core-0.0.36.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-01-30T02:28:04.512Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:11.499Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-01-08T09:06:04.602Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "47"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "80.03"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "7.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "35"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "10.14"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.35"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-10-20T08:28:45.861Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-A3mN21C/ZdIJz0J9/PSZvLR1dLBu8BG13tVE+w4A9v8dLS5omkoQVjHM9K5GaoJideMhK/11y6V7CMbMXCPQoQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "a6b0e5683016c8c2aefdd32dbb8ba93d3669a7a7"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/file@0.0.36",
      "group": "@git-diff-view",
      "name": "file",
      "version": "0.0.36",
      "description": "@git-diff-view/file",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc8e46329673753c12babcdbcfc653f472f6c68ef85b9fe8fd2816854a445a39f667aa4266b1cb004cd6798caa7b0bf7d18336e4fb8afc930e0d3e12e7386fcf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/file@0.0.36",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/file/-/file-0.0.36.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/file/-/file-0.0.36.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-04-22T03:23:10.422Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:15.234Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-01-08T09:06:08.363Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "35"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "80.03"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "15.26"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "23"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.24"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.35"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-10-20T08:28:50.319Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-3I5GMpZzdTwSurzbz8ZT9HL2xo74W5/o/SgWhUpEWjn2Z6pCZrHLAEzWeYyqewv30YM25PuK/JMODT4S5zhvzw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "1737b3cd2b31c7cc54f8bb0779468fab5757c5e3"
        },
        {
          "name": "ImportedModules",
          "value": "@git-diff-view/file,generateDiffFile,@git-diff-view/file/generateDiffFile"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/lowlight@0.0.30",
      "group": "@git-diff-view",
      "name": "lowlight",
      "version": "0.0.30",
      "description": "@git-diff-view/lowlight",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4de5aa2d92f2dfe80be008c2b3d90d159b38e01b7d31d2db5c0aa28038043a74f0096014e4b97f88196bf38bcbfd0425585d7da70f6def061eb689e9a364e469"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/lowlight@0.0.30",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/lowlight/-/lowlight-0.0.30.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/lowlight/-/lowlight-0.0.30.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-03-22T06:22:37.043Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:02.621Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-07-08T07:41:30.449Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "38"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1.58"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "16.21"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "20"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.10"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.29"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-07-06T17:46:38.100Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-TeWqLZLy3+gL4AjCs9kNFZs44Bt9MdLbXAqigDgEOnTwCWAU5Ll/iBlr84vL/QQlWF19pw9t7wYetonpo2TkaQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "feace14afd826d41e1c342ac2fbbd3c9be8cd02d"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/lowlight@0.0.36",
      "group": "@git-diff-view",
      "name": "lowlight",
      "version": "0.0.36",
      "description": "@git-diff-view/lowlight",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f07ddf51f9d6fa3c3c1046e110eaf4beae635f165f6e1360bdff6bb98e8696341dca68fc8f647af64f37830301fc696d58432de68e7adb877c3310f6d6faac64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/lowlight@0.0.36",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/lowlight/-/lowlight-0.0.36.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/lowlight/-/lowlight-0.0.36.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-03-22T06:22:37.043Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:02.621Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-01-08T09:05:21.152Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "38"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "80.03"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "13.21"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "26"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "6.06"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.35"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-10-20T08:28:35.131Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-8H3fUfnW+jw8EEbhEOr0vq5jXxZfbhNgvf9ruY6GljQdymj8j2R69k83gwMB/GltWEMt5o5624d8MxD21vqsZA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "eea197f7ed25f239c3e7a63ab915b4b7132f597d"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40git-diff-view/react@0.0.30",
      "group": "@git-diff-view",
      "name": "react",
      "version": "0.0.30",
      "description": "@git-diff-view/react",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d78f23fc30f934e27dd9c56319b3dc04e50963e0dae450be6623f85ba1314241694c02978bfbe1df52edf48593b8261d38df19a3453f5b61f8251daa508eb0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40git-diff-view/react@0.0.30",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@git-diff-view/react/-/react-0.0.30.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@git-diff-view/react/-/react-0.0.30.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2024-01-30T02:27:50.983Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-26T06:14:19.477Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-07-08T07:42:07.794Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mrwang555, 2711470541@qq.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "47"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1.58"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "7.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "29"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.20"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.29"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-07-06T17:47:00.555Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "mrwang555"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-MtePI/ww+TTifdnFYxmz3ATlCWPg2uRQvmYj+FuhMUJBaUwCl4v74d9S7fSFk7gmHTjfGaNFP1th+CUdqlCOsA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "36e0c33a6a4cf1ab3d1f8634e221f1f3a04270c4"
        },
        {
          "name": "ImportedModules",
          "value": "@git-diff-view/react,DiffView,@git-diff-view/react/DiffView,@git-diff-view/react/styles/diff-view-pure.css"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40graphiql/react@0.22.1",
      "group": "@graphiql",
      "name": "react",
      "version": "0.22.1",
      "description": "[Changelog](https://github.com/graphql/graphiql/blob/main/packages/graphiql-react/CHANGELOG.md) | [API Docs](https://graphiql-test.netlify.app/typedoc/modules/graphiql_react.html) | [NPM](https://www.npmjs.com/package/@graphiql/react)",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c10a584eda3b82bd5be6139a83e0f1e2bc92e4869d1da885f5ce021df19f375022a9c4ed8cf9b12ca512fd68e410684e05e31a84c42524e41d802fec1cf9a82"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40graphiql/react@0.22.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@graphiql/react/-/react-0.22.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphiql/react/-/react-0.22.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-05-21T07:28:28.853Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-11T16:26:14.083Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-05-12T20:52:28.827Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "acao"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "rikki.schulte@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "mjmahone, mahoney.mattj@gmail.com, benjie, npm@benjiegillam.com, acao, rikki.schulte@gmail.com, i1g, ivan.goncharov.ua@gmail.com, leebyron, lee@leebyron.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "mjmahone, mahoney.mattj@gmail.com, benjie, npm@benjiegillam.com, acao, rikki.schulte@gmail.com, i1g, ivan.goncharov.ua@gmail.com, leebyron, lee@leebyron.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "479"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "2.28"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.12"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "234"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "19.58"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.22.1-canary-dccd76b3.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-05-10T14:02:40.047Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "acao"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-PBClhO2juCvVvmE5qD4PHivJLkhp0dqIX1zgId8Z83UCKpxO2M+bEspRL9aOQQaE4F4xqExCUk5B2AL+wc+agg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "9d9b1745bfb9faaece0a5620c4d8c3a8b9ca7de1"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40headlessui/react@1.7.19",
      "group": "@headlessui",
      "name": "react",
      "version": "1.7.19",
      "description": "A set of completely unstyled, fully accessible UI components for React, designed to integrate beautifully with Tailwind CSS.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e5fbcab73a53097c96c028cffefd8daae8f3d86ebcaa3535c36ebcb1ed25cb2036a6905ea24056eb8981e06b4758e383ef0e1bef0560b1d578f8539f86e213b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40headlessui/react@1.7.19",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@headlessui/react/-/react-1.7.19.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@headlessui/react/-/react-1.7.19.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-09-24T10:57:33.961Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-13T16:13:37.114Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-04-15T15:41:53.016Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "malfaitrobin"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "820"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "3.07"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.55"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "577"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.60"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-insiders.b86737b"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-04-12T13:55:30.028Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "malfaitrobin"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Ll+8q3OlMJfJbAKM/+/Y2q6PPYbryqNTXDbryx7SXLIDamkF6iQFbriYHga0dY44PvDhvvBWCx1Xj4U5+G4hOw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "91c78cf5fcb254f4a0ebe96936d48421caf75f40"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40lezer/common@1.2.3",
      "group": "@lezer",
      "name": "common",
      "version": "1.2.3",
      "description": "Syntax tree data structure and parser interfaces for the lezer parser",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3ba2373c7a306aaf64443ec5b1263acc16c03fcac0c21480a7f3310e47d9abab33aed9a9a121362e2c3f1a83a5d97f40855c3ae12aac3bfad5bc717eba35a0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40lezer/common@1.2.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@lezer/common/-/common-1.2.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@lezer/common/-/common-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-08-11T10:08:31.276Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-08T12:22:15.445Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-10-16T12:05:39.050Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "32"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "13.97"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "21.18"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "25"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.66"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.2.2"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-10-02T12:43:23.707Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-w7ojc8ejBqr2REPsWxJjrMFsA/ysDCFICn8zEOR9mrqzOu2amhITYuLD8ag6XZf0CFXDrhKqw7+tW8cX66NaDA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "138fcddab157d83da557554851017c6c1e5667fd"
        },
        {
          "name": "ImportedModules",
          "value": "@lezer/common,parseMixed,@lezer/common/parseMixed,SyntaxNode,@lezer/common/SyntaxNode"
        },
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/json-ast.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40lezer/highlight@1.2.1",
      "group": "@lezer",
      "name": "highlight",
      "version": "1.2.1",
      "description": "Highlighting system for Lezer parse trees",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67976e93844dff7cee54eec9ab4a462c9deaca7a71515b21ec86d46c68fcf3eb95d80a52027ea45a0d9abb78896fed198bb90ab6a7df2044a035c4575995a648"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40lezer/highlight@1.2.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@lezer/highlight/-/highlight-1.2.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@lezer/highlight/-/highlight-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-04-20T13:19:47.918Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2025-10-26T09:39:06.003Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-08-13T21:05:16.049Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "13"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "275.05"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "47.05"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "9"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.85"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.2.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-11-12T19:49:38.506Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Z5duk4RN/3zuVO7Jq0pGLJ3qynpxUVsh7IbUbGj88+uV2ApSAn6kWg2au3iJb+0Zi7kKtqffIESgNcRXWZWmSA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "596fa8f9aeb58a608be0a563e960c373cbf23f8b"
        },
        {
          "name": "ImportedModules",
          "value": "@lezer/highlight,styleTags,@lezer/highlight/styleTags,tags,@lezer/highlight/tags"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40lezer/json@1.0.3",
      "group": "@lezer",
      "name": "json",
      "version": "1.0.3",
      "description": "lezer-based JSON grammar",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04ff4acdd17d637e4f0e9bf4e2bd157924ca0dea31e6f56bdde7c4ede05bc77af8b37a0d2dfba77217a36618c0ae67a27811fe9d53a9808881269100bfc8a5a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40lezer/json@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@lezer/json/-/json-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@lezer/json/-/json-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-08-11T10:10:30.086Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2024-12-29T09:43:41.890Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-29T09:43:41.647Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "366.68"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "215.24"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "4"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.70"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.2"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-12-28T17:21:53.433Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-BP9KzdF9Y35PDpv04r0VeSTKDeox5vVr3efE7eBbx3r4s3oNLfunchejZhjArmeieBH+nVOpgIiBJpEAv8ilqQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "e773a012ad0088fbf07ce49cfba875cc9e5bc05f"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40lezer/lr@1.4.2",
      "group": "@lezer",
      "name": "lr",
      "version": "1.4.2",
      "description": "Incremental parser",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6ed0ad63088767435d9a58d680554e5bce2ec1775c39e09dc40a000d3e660bb5028fd07063d9c13fe5ca010fae8c4f5d316ed22e52beed8344a16ecbe4d260c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40lezer/lr@1.4.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@lezer/lr/-/lr-1.4.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@lezer/lr/-/lr-1.4.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-08-11T10:08:39.569Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-18T11:07:09.950Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-07-27T09:27:28.114Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "marijn, marijn@haverbeke.berlin"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "47"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "57.96"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "18.02"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "37"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.22"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.4.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-05-30T10:31:32.003Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "marijn"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-pu0K1jCIdnQ12aWNaAVU5bzi7Bd1w54J3ECgANPmYLtQKP0HBj2cE/5coBD66MT10xbtIuUr7tg0Shbsvk0mDA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "931ea3dea8e9de84e90781001dae30dea9ff1727"
        },
        {
          "name": "ImportedModules",
          "value": "@lezer/lr,LRParser,@lezer/lr/LRParser"
        },
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/grammar/http.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/grammar/http.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/http/index.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40mcp-b/global@2.2.0",
      "group": "@mcp-b",
      "name": "global",
      "version": "2.2.0",
      "description": "W3C Web Model Context API polyfill - Let AI agents like Claude, ChatGPT, and Gemini interact with your website via navigator.modelContext",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfe14db955cf1b287362c54f2f9508b4c91317e183e84de21c49ae258d32c9d8e3a56b65aab530edbecf2e1caeca629c735fa34ccba7cabaf7669b34b8f11f8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40mcp-b/global@2.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@mcp-b/global/-/global-2.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mcp-b/global/-/global-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2025-07-24T05:23:12.684Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T02:14:20.457Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-12T03:17:12.266Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "78"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "4.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.27"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "65"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "18.32"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-07T04:48:53.790Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-3+FNuVXPGyhzYsVPL5UItMkTF+GD6E3iHEmuJY0yydjjpWtlqrUw7b7PLhyuymKcc1+jTMunyrr3Zps0uPEfiw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "56d5bfa4e7eb52bde9c0daf72e4cd672742ceca9"
        },
        {
          "name": "ImportedModules",
          "value": "@mcp-b/global"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "false"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "heuristic"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@mcp-b/global"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/webmcp/index.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40mcp-b/transports@2.2.0",
      "group": "@mcp-b",
      "name": "transports",
      "version": "2.2.0",
      "description": "Browser transport implementations for Model Context Protocol (MCP) - postMessage, Chrome extension messaging, and iframe communication for AI agents and LLMs",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd2a987a4ae6a2eef6cfaec61798d76839d07614fce079668b899eb219b4ccc9fbd4695a6261e15df6f752c816df143b63909ec50e14f4bf48add1baffe3137c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40mcp-b/transports@2.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@mcp-b/transports/-/transports-2.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mcp-b/transports/-/transports-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2025-06-13T05:48:42.484Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T02:14:15.114Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-12T03:17:06.291Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "56"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "4.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "1.01"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "44"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "4.87"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-07T04:48:51.130Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-zSqYekrmou72z67GF5jXaDnQdhT84Hlmi4meshm0zMn71GlaYmHhXfb3UsgW3xQ7Y5CexQ4U9L9IrdG6/+MTfA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "1b74945ea22b7581b5e75153461aa36bfc6c3c2b"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "false"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "heuristic"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@mcp-b/transports"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40mcp-b/webmcp-polyfill@2.2.0",
      "group": "@mcp-b",
      "name": "webmcp-polyfill",
      "version": "2.2.0",
      "description": "Strict WebMCP core runtime polyfill for navigator.modelContext",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ace3d24fe0c1d754c3153730fcf77f04b22536b44cd6364ed49fa73a0bfc4ae6bb2d908ad0650b152db1fb345b6680c6fa6dbaf2cd2aa0f49592148c64536ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40mcp-b/webmcp-polyfill@2.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@mcp-b/webmcp-polyfill/-/webmcp-polyfill-2.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mcp-b/webmcp-polyfill/-/webmcp-polyfill-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2026-02-15T01:23:00.444Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T02:13:57.510Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-12T03:16:46.872Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "31"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "4.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.71"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "19"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "6.92"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-07T04:48:42.904Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-as49JP4MHXVMMVNzD8938EsiU2tEzWNk7Un6c6C/xK5rstkIrQZQsVLbH7NFtmgMb6bbryzSqg9JWSFIxkU27Q=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "9777ed4ec33089f0f8bfda8cd25c90f91b178bc0"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "false"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "heuristic"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@mcp-b/webmcp-polyfill"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40mcp-b/webmcp-ts-sdk@2.2.0",
      "group": "@mcp-b",
      "name": "webmcp-ts-sdk",
      "version": "2.2.0",
      "description": "Browser-adapted MCP TypeScript SDK - Dynamic tool registration for W3C Web Model Context API and AI agent integration",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2338f0aaba5b6c049b009c69af99399b5af28842c6767a210d7ce92ee07b50ad95235aec030434e23e7db9190cbdaa99e22c2fc474f32a4f806a3441e7b39c3f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40mcp-b/webmcp-ts-sdk@2.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@mcp-b/webmcp-ts-sdk/-/webmcp-ts-sdk-2.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mcp-b/webmcp-ts-sdk/-/webmcp-ts-sdk-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2025-10-27T04:43:50.121Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T02:14:03.540Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-12T03:16:52.531Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "42"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "4.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.93"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "29"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.28"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-07T04:48:45.405Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-IzjwqrpbbASbAJxpr5k5m1ryiELGdnohDXzpLuB7UK2VI1rsAwQ04j59uRkMvaqZ4iwvxHTzKk+AajRB57OcPw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "2dee73c2dd59f24a60afd8402f6cb15fd7546e4a"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "false"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "heuristic"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@mcp-b/webmcp-ts-sdk"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40mcp-b/webmcp-types@2.2.0",
      "group": "@mcp-b",
      "name": "webmcp-types",
      "version": "2.2.0",
      "description": "Strict TypeScript type definitions for the WebMCP core API (navigator.modelContext)",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7f51803040a064a9180ad7c1a46c64789ba0a7f6fcfa432ea94cbe4b2088a750e851e5d30b68d97f6e51ffb494fe9c995e326803a056561809a6afe7c0cf63d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40mcp-b/webmcp-types@2.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@mcp-b/webmcp-types/-/webmcp-types-2.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mcp-b/webmcp-types/-/webmcp-types-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2026-02-15T01:22:55.304Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T02:13:38.289Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-12T03:16:33.174Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "miguelspizza, alexmnahas@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "30"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "4.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.85"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "18"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.84"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-07T04:48:36.862Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "miguelspizza"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-1/UYAwQKBkqRgK18GkbGR4m6Cn9vz6Qy6pTL5LIIinUOhR5dMLaNl/blH/tJT+nJleMmgDoFZWGAmmr+fAz2PQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "e04e0593680552f4ff6f598a5b1771caa13a4b14"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "false"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "heuristic"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@mcp-b/webmcp-types"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40monaco-editor/react@4.7.0",
      "group": "@monaco-editor",
      "name": "react",
      "version": "4.7.0",
      "description": "Monaco Editor for React - use the monaco-editor in any React application without needing to use webpack (or rollup/parcel/etc) configuration files / plugins",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732cd7402b4ee3bc9dcf1a50b42192406382f069376547815c50310fe0965d8168e4ea99c995289c59740f05254f201f4479ed05fc36a77c38b3d47aa1ed5e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40monaco-editor/react@4.7.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2019-06-21T17:04:10.455Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2025-11-21T07:38:39.747Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-02-13T16:13:41.390Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "surenat"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "contact@surenatoyan.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "surenat, contact@surenatoyan.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "surenat, contact@surenatoyan.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "106"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "60.83"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "4.04"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "100"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "15.05"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "4.7.0-rc.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-12-14T20:23:21.263Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "surenat"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "35a1ec01bfe729f38bfc025df7b7bac145602a60"
        },
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/fs@1.1.1",
      "group": "@npmcli",
      "name": "fs",
      "version": "1.1.1",
      "description": "filesystem utilities for the npm cli",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0a1b9443d0654fe32744cd19ff23804d0eec43b6a55b39d9bcebbe53e3d3881bf34685a2b4a633d7ed970396f2986c0fae96f54adf3b5f705e2e05d3b1b896d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/fs@1.1.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@npmcli/fs/-/fs-1.1.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/fs/-/fs-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-08-25T19:28:43.580Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-15T18:44:20.359Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-02-10T22:12:41.497Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "nlf"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "quitlahok@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "fritzy, fritzy@github.com, darcyclarke, darcy@darcyclarke.me, ruyadorno, ruyadorno@hotmail.com, nlf, quitlahok@gmail.com, gar, gar+npm@danger.computer, lukekarrys, luke@lukekarrys.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "fritzy, fritzy@github.com, darcyclarke, darcy@darcyclarke.me, ruyadorno, ruyadorno@hotmail.com, nlf, quitlahok@gmail.com, gar, gar+npm@danger.computer, lukekarrys, luke@lukekarrys.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "63.02"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "106.10"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "1"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2021-12-09T21:50:24.400Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "nlf"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-8KG5RD0GVP4ydEzRn/I4BNDuxDtqVbOdm8675T49OIG/NGhaK0pjPX7ZcDlvKYbA+ulvVK3ztfcF4uBdOxuJbQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "72f719fe935e687c56a4faecf3c03d06ba593257"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/%40playwright/test@1.56.1",
      "group": "@playwright",
      "name": "test",
      "version": "1.56.1",
      "description": "A high-level API to automate web browsers",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd2318b4bff339c169bc9096ef543f3841906fb29804f01d2a1df958d4a469903be499403bc103f1437a1943539b776b5a899c6dca913c5a906cb69ef3205376"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40playwright/test@1.56.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@playwright/test/-/test-1.56.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sdc-playwright/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@playwright/test/-/test-1.56.1.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "playwright"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-09-24T05:44:34.469Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-18T00:18:41.094Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-10-17T00:51:44.311Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "GitHub Actions"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "npm-oidc-no-reply@github.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "pavelfeldman, pavel.feldman@gmail.com, yurys, yury.semikhatsky@gmail.com, dgozman-ms, dgozman@microsoft.com, playwright-bot, playwright-npm-bot@microsoft.com, github actions, npm-oidc-no-reply@github.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "pavelfeldman, pavel.feldman@gmail.com, yurys, yury.semikhatsky@gmail.com, dgozman-ms, dgozman@microsoft.com, playwright-bot, playwright-npm-bot@microsoft.com, github actions, npm-oidc-no-reply@github.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "3242"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.61"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "2856"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.56.1-beta-1760662108000"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-10-17T00:49:44.253Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "GitHub Actions"
        },
        {
          "name": "cdx:npm:trustedPublishing",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-vSMYtL/zOcFpvJCW71Q/OEGQb7KYBPAdKh35WNSkaZA75JlAO8ED8UN6GUNTm3drWomcbcqRPFqQbLae8yBTdg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "6e3bf3d0c90c5cf94bf64bdb56fd15a805c8bd3f"
        },
        {
          "name": "cdx:npm:provenanceUrl",
          "value": "https://registry.npmjs.org/-/npm/v1/attestations/@playwright%2ftest@1.56.1"
        },
        {
          "name": "ImportedModules",
          "value": "@playwright/test,test,@playwright/test/test,APIRequestContext,@playwright/test/APIRequestContext,expect,@playwright/test/expect,Locator,@playwright/test/Locator,Page,@playwright/test/Page,BrowserContext,@playwright/test/BrowserContext,FrameLocator,@playwright/test/FrameLocator,APIResponse,@playwright/test/APIResponse"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sdc-playwright/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sdc-playwright/fixtures/base.ts"
          },
          {
            "location": "sdc-playwright/fixtures/fixture-utils.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/builder/calculated_expression_panel.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/builder/condition_builder.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/component-settings.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/custom-select.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/debugPanel.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/outline.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/preview.overlay.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/properties.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/questionnairesGrid.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/renderer.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/toolbar.ts"
          },
          {
            "location": "sdc-playwright/page-object/components/translation-modal.ts"
          },
          {
            "location": "sdc-playwright/page-object/pages/base.page.ts"
          },
          {
            "location": "sdc-playwright/page-object/pages/builder.page.ts"
          },
          {
            "location": "sdc-playwright/page-object/pages/renderer.page.ts"
          },
          {
            "location": "sdc-playwright/utils/api-client.ts"
          },
          {
            "location": "sdc-playwright/utils/builder-layout.ts"
          },
          {
            "location": "sdc-playwright/utils/clipboard-stub.ts"
          },
          {
            "location": "sdc-playwright/utils/dnd.ts"
          },
          {
            "location": "sdc-playwright/utils/draft-recovery.ts"
          },
          {
            "location": "sdc-playwright/utils/locatorAssertions.ts"
          },
          {
            "location": "sdc-playwright/utils/locatorAssertions.ts"
          },
          {
            "location": "sdc-playwright/utils/screenshots.ts"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/%40protobufjs/path@1.1.2",
      "group": "@protobufjs",
      "name": "path",
      "version": "1.1.2",
      "description": "A minimal path module to resolve Unix, Windows and URL paths alike.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8939c2794e6d3c74e1c06dd4771abbcffb25147e48c6e5e3ec1d87333052eadd998c9000fdf1c0e0713da2035949f4d57015de2d1ff8924a87b8e185a496d10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/path@1.1.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2016-12-14T14:41:54.708Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2022-06-12T22:53:40.342Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2017-02-23T16:54:18.933Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "dcode"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "dcode+npm@dcode.io"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "dcode, dcode+npm@dcode.io, protobufjs, dcode+protobufjs@dcode.io"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "dcode, dcode+npm@dcode.io, protobufjs, dcode+protobufjs@dcode.io"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "28.94"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "10.02"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "4"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "2.89"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.1.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2017-01-25T18:17:06.083Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "dcode"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "6cc2b20c5c9ad6ad0dccfd21ca7673d8d7fbf68d"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/primitive@1.0.1",
      "group": "@radix-ui",
      "name": "primitive",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c90f28197d8656c1183161b1728beed6e1963c2c55e4115f79e631a8f9ae0335322d3f6a99a317480857a5bd16aeca487aa633749a64876bc73287493e04486b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/primitive@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:36:25.705Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:13.707Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:02:47.905Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "84"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.78"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "22"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.16"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:30:46.820Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-yQ8oGX2GVsEYMWGxcovu1uGWPCxV5BFfeeYxqPmuAzUyLT9qmaMXSAhXpb0WrspIeqYzdJpkh2vHModJPgRIaw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "e46f9958b35d10e9f6dc71c497305c22e3e55dbd"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-arrow@1.0.3",
      "group": "@radix-ui",
      "name": "react-arrow",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c123fea47b01fe341168beafa2e6ec43f665ac60471eb3a39819ebd7d871620b52d16bc01706612b658ffd8639c85f6e2840821040c6c6e2f1ab53412b9d7014"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-arrow@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-arrow/-/react-arrow-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-arrow/-/react-arrow-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:11.193Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:31.435Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:02:55.346Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "257"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "151"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.97"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.3-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:30:58.567Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-wSP+pHsB/jQRaL6voubsQ/ZlrGBHHrOjmBnr19hxYgtS0WvAFwZhK2WP/YY5yF9uKECCEEDGxuLxq1NBK51wFA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "c24f7968996ed934d57fe6cde5d6ec7266e1d25d"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-collection@1.0.3",
      "group": "@radix-ui",
      "name": "react-collection",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd2cd6fb43d6ef2041a10953f3035c1ad6b1683d174aed2e2d4160aed1d8d3c01cc74e5368768e9952d1ef77348ff72aa43cb9dca04c3bbb34771db098e20320"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-collection@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-collection/-/react-collection-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-collection/-/react-collection-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:19.761Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:49.219Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:18.443Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "273"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.93"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "154"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.96"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.3-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:08.387Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-3SzW+0PW7yBBoQlT8wNcGtaxaD0XSu0uLUFgrtHY08Acx05TaHaOmVLR73c0j/cqpDy53KBMO7s0dx2wmOIDIA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "9595a66e09026187524a36c6e7e9c7d286469159"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-compose-refs@1.0.1",
      "group": "@radix-ui",
      "name": "react-compose-refs",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c348181de3814a1dad4544c539f6a04c3c5725d8f644fb69e6aae9e3f81585c986239e120358bd88b43b37aeb6c90d03adcede6721e6cb0907384117f3e8b27"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-compose-refs@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-compose-refs/-/react-compose-refs-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-compose-refs/-/react-compose-refs-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:36:36.211Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:20.578Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:18.339Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "98"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "62"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.99"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:10.046Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-fDSBgd44FKHa1FRMU59qBMPFcl2PZE+2nmqunj+BWFyYYjnhIDWL2ItDs3rrbJDQOtzt5nIebLCQc4QRfz6LJw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "7ed868b66946aa6030e580b1ffca386dd4d21989"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-context@1.0.1",
      "group": "@radix-ui",
      "name": "react-context",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79b6eb745a184dcb99d2fe301b9b5e7469e9f6dcdc57c6b0cecc58a61ee05d4caf9cd2ee4c8702935ab5ec911b9d585700a1bda17dcab5c87088c200629f4d2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-context@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-context/-/react-context-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-context/-/react-context-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:36:37.667Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:23.816Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:18.437Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "118"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "66"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.99"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:11.439Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-ebbrdFoYTcuZ0v4wG5tedGnp9tzcV8awzsxYph7gXUyvnNLuTIcCk1q17JEbnVhXAKG9oX3KtchwiMIAYp9NLg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "fe46e67c96b240de59187dcb7a1a50ce3e2ec00c"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-dialog@1.0.5",
      "group": "@radix-ui",
      "name": "react-dialog",
      "version": "1.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a35895ff014a41ef4dde1016a7b819c859d21783a36f24509770d952664e3176ccc2761ac9801a1477570693aeef14ef96740da97c8fe994ea6acffe4650fe9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-dialog@1.0.5",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-dialog/-/react-dialog-1.0.5.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-dialog/-/react-dialog-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:21.495Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:09:41.908Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:56:53.122Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "381"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "202"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.5-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:43:29.712Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-GjWJX/AUpB703eEBanuBnIWdIXg6NvJFCXcNlSZk4xdszCdhrJgBoUd1cGk67vFO+WdA2pfI/plOpqz/5GUP6Q=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "71657b1b116de6c7a0b03242d7d43e01062c7300"
        },
        {
          "name": "ImportedModules",
          "value": "@radix-ui/react-dialog"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-direction@1.0.1",
      "group": "@radix-ui",
      "name": "react-direction",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45772f9d7832bd8bc110e84206e75d29e715928322235d09726e5c4c8eda6c94401d87c5c5ebbe14142cfc3bddc5262e7314799a76b474db0be9016576ce5330"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-direction@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-direction/-/react-direction-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-direction/-/react-direction-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-04-11T14:43:54.351Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:27.295Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:22.994Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "117"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "57"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:17.008Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-RXcvnXgyvYvBEOhCBuddKecVkoMiI10Jcm5cTI7abJRAHYfFxeu+FBQs/DvdxSYucxR5mna0dNsL6QFlds5TMA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "9cb61bf2ccf568f3421422d182637b7f47596c9b"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-dismissable-layer@1.0.5",
      "group": "@radix-ui",
      "name": "react-dismissable-layer",
      "version": "1.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6897838d0872c20f4b06edadfc0b79f210afafba449b4a3629ed71df707e3218cd9a6675eeccb82889a8d0a3cb82c9dcff337b18f75c7bc0a79f4496bf064eee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-dismissable-layer@1.0.5",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.0.5.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:21.529Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:52.904Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:56:53.455Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "315"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "172"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.5-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:43:36.963Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-aJeDjQhywg9LBu2t/At58hCvr7pEm0o2Ke1x33B+MhjNmmZ17sy4KImo0KPLgsnc/zN7GPdce8Cnn0SWvwZO7g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "3f98425b82b9068dfbab5db5fff3df6ebf48b9d4"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-dropdown-menu@2.0.6",
      "group": "@radix-ui",
      "name": "react-dropdown-menu",
      "version": "2.0.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ba4ee14ea1698b5aaf8cfde08b19dfdb4361df017d51260beb050e8040b9b37efb0b75e7f16d6bbc1bdcdccdc3c57dc48f7a1cfd19ca45e8af5062b78557c84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-dropdown-menu@2.0.6",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-dropdown-menu/-/react-dropdown-menu-2.0.6.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-dropdown-menu/-/react-dropdown-menu-2.0.6.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:21.625Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:10:51.851Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:56:59.832Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "407"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.91"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "221"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.0.6-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:43:42.143Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-i6TuFOoWmLWq+M/eCLGd/bQ2HfAX1RJgvrBQ6AQLmzfvsLdefxbWu8G9zczcPFfcSPehz9GcpF6K9QYreFV8hA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "cdf13c956c5e263afe4e5f3587b3071a25755b63"
        },
        {
          "name": "ImportedModules",
          "value": "@radix-ui/react-dropdown-menu"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-focus-guards@1.0.1",
      "group": "@radix-ui",
      "name": "react-focus-guards",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45e72dd9d59b43cc1a1b384c6afb086e64950a06319172f1c51dd9bc25fbf493a0973744cb825731bf7c96ae213f151b2ebefb9cfd143867f8adc314facd6950"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-focus-guards@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:21.624Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:31.177Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:27.890Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "122"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "64"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.98"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:22.389Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Rect2dWbQ8waGzhMavsIbmSVCgYxkXLxxR3ZvCX79JOglzdEy4JXMb98lq4hPxUbLr77nP0UOGf4rcMU+s1pUA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "1ea7e32092216b946397866199d892f71f7f98ad"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-focus-scope@1.0.4",
      "group": "@radix-ui",
      "name": "react-focus-scope",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0bd38320bdff859b2bd97987cdbb510f01a6b10fe6b0edc61e201f4bf45beaf3ebab865b5345a128e72b0a3a91ee28f725b1971250c2a5374e71e2ef8220da4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-focus-scope@1.0.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-focus-scope/-/react-focus-scope-1.0.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-focus-scope/-/react-focus-scope-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:27.360Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:56.353Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:56:59.868Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "271"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.96"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "165"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.4-rc.7"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:43:50.466Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-sL04Mgvf+FmyvZeYfNu1EPAaaxD+aw7cYeIB9L9Fvq8+urhltTRaEo5ysKOpHuKPclsZcSUMKlN05x4u+CINpA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "2ac45fce8c5bb33eb18419cdc1905ef4f1906525"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-id@1.0.1",
      "group": "@radix-ui",
      "name": "react-id",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b48eec4ff92a629f29f7ac86598d4e0272c7aea0e0cc779f441290d98024052e636bb40b719f59fee63b6c48cf51ab5ff11a26a1733cff5b0c8f5209684e54cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-id@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-id/-/react-id-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-id/-/react-id-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:36:42.170Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:49.963Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:38.811Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "137"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.85"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "105"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.05"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:30.208Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-tI7sT/kqYp8p96yGWY1OAnLHrqDgzHefRBKQ2YAkBS5ja7QLcZ9Z/uY7bEjPUatf8RomoXM8/1sMj1IJaE5UzQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "73cdc181f650e4df24f0b6a5b7aa426b912c88c0"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-menu@2.0.6",
      "group": "@radix-ui",
      "name": "react-menu",
      "version": "2.0.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0559052d2f9b502f077089a444a3d2895ba603554f38e102e5604c893f90015b0fcd6d4527323d2a7aa01b15433c172a979c57ac7903dc9395a175845c3f1260"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-menu@2.0.6",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-menu/-/react-menu-2.0.6.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-menu/-/react-menu-2.0.6.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:28.426Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:10:16.731Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:57:04.076Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "405"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "218"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.0.6-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:44:10.321Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-BVkFLS+bUC8HcImkRKPSiVumA1VPOOEC5WBMiT+QAVsPzW1FJzI9KnqgGxVDPBcql5xXrHkD3JOVoXWEXD8SYA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "2c9e093c1a5d5daa87304b2a2f884e32288ae79e"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-popover@1.0.7",
      "group": "@radix-ui",
      "name": "react-popover",
      "version": "1.0.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b21b6f56796cc53e9f68c9cafdaee7d30a6dc010f6df173567999daed28bc1511fb04317a1d4b4af9b34fe0e4fd215fffc4298652dacc548ea7f3960e766529d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-popover@1.0.7",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-popover/-/react-popover-1.0.7.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-popover/-/react-popover-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:29.143Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:10:24.011Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:57:03.635Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "391"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.91"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "211"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.7-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:44:17.722Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-shtvVnlsxT6faMnK/a7n0wptwBD23xc1Z5mdrtKLwVEfsEMXodS0r5s0/g5P0hX//EKYZS2sxUjqfzlg52ZSnQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "23eb7e3327330cb75ec7b4092d685398c1654e3c"
        },
        {
          "name": "ImportedModules",
          "value": "@radix-ui/react-popover"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-popper@1.1.3",
      "group": "@radix-ui",
      "name": "react-popper",
      "version": "1.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70aa68a63ff94476568eb6c5dbce3a8c135a723415c243f4ebc0df9a0acd257a6f556acebe502613dc528b2e4ea9e13e1a2f03f5f3fea038549cfa8d318f3fe7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-popper@1.1.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.1.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:29.758Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:09:54.530Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:57:03.703Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "307"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.95"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "172"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.1.3-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:44:19.876Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-cKpopj/5RHZWjrbF2846jBNacjQVwkP068DfmgrNJXpvVWrOvlAmE9xSiy5OqeE+Gi8D9fP+oDhUnPqNMY8/5w=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "24c03f527e7ac348fabf18c89795d85d21b00b42"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-portal@1.0.4",
      "group": "@radix-ui",
      "name": "react-portal",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4248be0bf12e1945424133930f9bf327326e31495ec1bcee2b2532fbf887336bb01a2aeef6065e049b4700f2801240792961a2f663ff08729c634c2dd5a5b8e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-portal@1.0.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-portal/-/react-portal-1.0.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-portal/-/react-portal-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:30.395Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:09:07.484Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:57:29.517Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "289"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.98"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "173"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.4-rc.8"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:44:21.819Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Qki+C/EuGUVCQTOTD5vzJzJuMUlewbzuKyUy+/iHM2uwGiru9gZeBJtHAPKAEkB5KWGi9mP/CHKcY0wt1aW45Q=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "df4bfd353db3b1e84e639e9c63a5f2565fb00e15"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-presence@1.0.1",
      "group": "@radix-ui",
      "name": "react-presence",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5172d6e1401b218e598dcbf38df445a39831bdaf108ab0bd845ef0444e14e60cfe4cfd036d193efffab2b8043531c0f106dd7134c05369c8851af12626f0190a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-presence@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:30.502Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:53.279Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:50.153Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "183"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "108"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.97"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:50.313Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-UXLW4UAbIY5ZjcvzjfRFo5gxva8QirC9hF7wRE4U5gz+TP0DbRk+//qyuAQ1McDxBt1xNMBTaciFGvEmJvAZCg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "491990ba913b8e2a5db1b06b203cb24b5cdef9ba"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-primitive@1.0.3",
      "group": "@radix-ui",
      "name": "react-primitive",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca2e7cb95ca801c2bf36ad629d1639e994a32b2a4134a4daff599c2fca9d97aa097846836ce95d973ac69fb3fa43721de5df9260d19ce40260738bc6863b39fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-primitive@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-primitive/-/react-primitive-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-primitive/-/react-primitive-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-01-22T17:30:54.937Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:24.202Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:50.289Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "257"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "151"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.97"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.3-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:31:54.295Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-yi58uVyoAcK/Nq1inRY56ZSjKypBNKTa/1mcL8qdl6oJeEaDbOldlzrGn7P6Q3Id5d+SYNGc5AJgc4vGhjs5+g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "d49ea0f3f0b2fe3ab1cb5667eb03e8b843b914d0"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-roving-focus@1.0.4",
      "group": "@radix-ui",
      "name": "react-roving-focus",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da6520e4c81cbb4d355641b2f857f3672cdb9ae516ce05a48f7aefbf8caefa62f0d37fa64f36f1647bdf706c85a766fc12441e324a5143916203656bd8ee9379"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-roving-focus@1.0.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.0.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:32.281Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:09:58.356Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:51.034Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "324"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "171"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.4-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:00.882Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-2mUg5Mgcu001VkGy+FfzZyzbmuUWzgWkj3rvv4yu+mLw03+mTzbxZHvfcGyFp2b8EkQeMkpRQ5FiA2Vr2O6TeQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "e90c4a6a5f6ac09d3b8c1f5b5e81aab2f0db1974"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-slot@1.0.2",
      "group": "@radix-ui",
      "name": "react-slot",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61e4e9baae1d795fba0eeb2f5545b88af0609e41f010252ed0188de372f95020c581d86c45458082185317931bbcd4cfce68853b1f746ac0d25235ae08d6a9c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-slot@1.0.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.0.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-01-29T15:56:05.656Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:08:20.194Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:56.240Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "186"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "1.08"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "100"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.83"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.2-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:13.485Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-YeTpuq4deV+6DusvVUW4ivBgnkHwECUu0BiN43L5UCDFgdhsRUWAghhTF5MbvNTPzmiFOx90asDSUjWuCNapwg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "a9ff4423eade67f501ffb32ec22064bc9d3099ab"
        },
        {
          "name": "ImportedModules",
          "value": "@radix-ui/react-slot,Slot,@radix-ui/react-slot/Slot"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-tooltip@1.0.7",
      "group": "@radix-ui",
      "name": "react-tooltip",
      "version": "1.0.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94f87988a345550fe36affe3e99ad6ab76e57c3274387f51e8594d5073cca9d2ee43dbf00e016c471be5f1bec0b2ecb973cc66a288c7531287412380bcc1f1cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-tooltip@1.0.7",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-tooltip/-/react-tooltip-1.0.7.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-tooltip/-/react-tooltip-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:38.248Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:10:43.669Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-09-25T13:57:37.746Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "402"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.91"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "217"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.7-rc.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-25T13:44:44.094Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-lPh5iKNFVQ/jav/j6ZrWq3blfDJ0OH9R6FlNUHPMqdLuQ9vwDgFsRxvl8b7Asuy5c8xmoojHUxKHQSOAvMHxyw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "8f55070f852e7e7450cc1d9210b793d2e5a7686e"
        },
        {
          "name": "ImportedModules",
          "value": "@radix-ui/react-tooltip"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-callback-ref@1.0.1",
      "group": "@radix-ui",
      "name": "react-use-callback-ref",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fde0b8d7e12a74c491556a840e77738ef64eeda4160d39775586496d51b1afd906fd39776b83f0a9b23959bfb89ad784b296fdfdf0bb30581555bb99ea2b301"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-callback-ref@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-callback-ref/-/react-use-callback-ref-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-callback-ref/-/react-use-callback-ref-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:37:02.481Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:34.573Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:03:59.637Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "94"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "62"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.99"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:29.499Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-D94LjX4Sp0xJFVaoQOd3OO9k7tpBYNOXdVhkltUbGv2Qb9OXdrg/CpsjlZv7ia14Sylv398LswWBVVu5nqKzAQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "f4bb1f27f2023c984e6534317ebc411fc181107a"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-controllable-state@1.0.1",
      "group": "@radix-ui",
      "name": "react-use-controllable-state",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4af979198e4541e37be7c7d62ab8cce906fb6acbd77a2665b654f85368157e5f06c79500bf6b0c4742d6a3cca1b08661da8434785759e7d6a838e315edbe3b54"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-controllable-state@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-controllable-state/-/react-use-controllable-state-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-controllable-state/-/react-use-controllable-state-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:37:03.298Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:01:16.677Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:02.550Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "120"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.89"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "63"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:31.469Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Svl5GY5FQeN758fWKrjM6Qb7asvXeiZltlT4U2gVfl8Gx5UAv2sMR0LWo8yhsIZh2oQ0eFdZ59aoOOMV7b47VA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "ecd2ced34e6330caf89a82854aa2f77e07440286"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-escape-keydown@1.0.3",
      "group": "@radix-ui",
      "name": "react-use-escape-keydown",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf22fcda3e3485c162700f8ce04c7b855901f6f1e04ac7b5656a2602a57625edd195e2863b988cf0a30e12d7e8481d0f9c87a531dda50138d318c62a379ca54e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-escape-keydown@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-escape-keydown/-/react-use-escape-keydown-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-escape-keydown/-/react-use-escape-keydown-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-22T14:53:36.825Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:01:03.567Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:02.194Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "117"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.68"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "79"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.32"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.3-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:33.146Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-vyL82j40hcFicA+M4Ex7hVkB9vHgSse1ZWomAqV2Je3RleKGO5iM8KMOEtfoSB0PnIelMd2lATjTGMYqN5ylTg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "217b840c250541609c66f67ed7bab2b733620755"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-layout-effect@1.0.1",
      "group": "@radix-ui",
      "name": "react-use-layout-effect",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bffe517a08895987680af32721306434dc7a6c28f6d1f89a2675ad464535f32213a6dada5e37dfcf941b9f4e6e3a24273af8be75b9339e4a1a325b73d469eccd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-layout-effect@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-layout-effect/-/react-use-layout-effect-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-layout-effect/-/react-use-layout-effect-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:37:04.106Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:41.619Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:02.262Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "94"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "62"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.99"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:34.998Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-v/5RegiJWYdoCvMnITBkNNx6bCj20fiaJnWtRkU18yITptraXjffz5Qbn05uOiQnOvi+dbkznkoaMltz1GnszQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "be8c7bc809b0c8934acf6657b577daf948a75399"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-rect@1.0.1",
      "group": "@radix-ui",
      "name": "react-use-rect",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0aae432ee4a2b9854a354f28af324c6e5d794d78a54e724a50296d315420e77050385d7f0b9b6801a1aba3092092c74143d1fe4912f6de0d070e683db6f9b15f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-rect@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-rect/-/react-use-rect-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-rect/-/react-use-rect-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:37:07.069Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:01:06.750Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:04.851Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "100"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "68"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.99"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:38.117Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-Cq5DLuSiuYVKNU8orzJMbl15TXilTnJKUCltMVQg53BQOF1/C5toAaGrowkgksdBQ9H+SRL23g0HDmg9tvmxXw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "fde50b3bb9fd08f4a1cd204572e5943c244fcec2"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-use-size@1.0.1",
      "group": "@radix-ui",
      "name": "react-use-size",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89b6b2f95aab81c688eaf780a238e87cf013c2579d5e24a65fe0b42ab064ff18295fdac1ccf5773ac7f096141d50e15b87e2ca428acb613fb14d75bd57cc9dd2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-use-size@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-use-size/-/react-use-size-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-use-size/-/react-use-size-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:37:07.502Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:01:10.059Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:04.856Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "114"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.86"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "82"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.04"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:39.977Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-ibay+VqrgcaI6veAojjofPATwledXiSmX+C0KrBk/xgpX9rBzPV3OsfwlhQdUOFbh+LKQorLYT+xTXW9V8yd0g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "1c5f5fea940a7d7ade77694bb98116fb49f870b2"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/react-visually-hidden@1.0.3",
      "group": "@radix-ui",
      "name": "react-visually-hidden",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f8c38d723796112adbb8eb84cb9c1c8accc0c6fc994c3c7b5f660400bbdbfa98d6a452a19423dbd4adf40acfc34ae3554c9bfc5b65b87be8d51356d218a8e30"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/react-visually-hidden@1.0.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/react-visually-hidden/-/react-visually-hidden-1.0.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/react-visually-hidden/-/react-visually-hidden-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-12-15T15:31:40.815Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:09:31.184Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:04:04.824Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "257"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "151"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.97"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.3-rc.11"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:32:42.011Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-D4w41yN5YRKtu464TLnByKzMDG/JlMPHtfZgQAu9v6mNakUqGUI9vUrfQKz8NK41VMm/xbZbh76NUTVtIYqOMA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "51aed9dd0fe5abcad7dee2a234ad36106a6984ac"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40radix-ui/rect@1.0.1",
      "group": "@radix-ui",
      "name": "rect",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f2ae009a79db6f320f4d2b77a7d299ce60976d7f0c5470da257b390d3d4b285f9ed7f28424f8d92a72fcc75c3dae28d8a3e865e6594f4d0ebbb62168eb3b805"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40radix-ui/rect@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@radix-ui/rect/-/rect-1.0.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@radix-ui/rect/-/rect-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-03-03T19:36:26.126Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-06T01:00:16.972Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-05-26T11:02:47.938Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "benoitgrelard"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "benoit.grelard+npm@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colmtuite, colmtuite@gmail.com, benoitgrelard, benoit.grelard+npm@gmail.com, stephenhaney, stephen.haney@gmail.com, andy-hook, hello@andyhook.dev, hadihallak, hallak.aa@gmail.com, vladmoroz, hi@vladmoroz.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "58"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.90"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.78"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "26"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.16"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.0.1-rc.6"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-05-25T13:30:48.380Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "stephenhaney"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-fyrgCaedtvMg9NK3en0pnOYJdtfwxUcNolezkNPUsoX57X8oQk+NkqcvzHXD2uKNij6GXmWU9NDru2IWjrO4BQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "bf8e7d947671996da2e30f4904ece343bc4a883f"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sentry/react@10.47.0",
      "group": "@sentry",
      "name": "react",
      "version": "10.47.0",
      "description": "Official Sentry SDK for React.js",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66d255eb1c45f2351513d7b7610506dc3a345daa46d468e78b22f2a8c3e037a70dbecfc769124e0dfee6eb4072f951aa725e5702b12310f4efc7c09d3d45c37c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40sentry/react@10.47.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@sentry/react/-/react-10.47.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sentry/react/-/react-10.47.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-06-03T16:53:19.366Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T12:28:33.070Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-31T11:48:49.407Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "sentry-bot"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "accounts@sentry.io"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "sentry-bot, accounts@sentry.io"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "sentry-bot, accounts@sentry.io"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "565"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "5.85"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "2.75"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "549"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "2.12"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "10.46.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-25T15:30:23.432Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "sentry-bot"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-ZtJV6xxF8jUVE9e3YQUG3Do0XapG1GjniyLyqMPgN6cNvs/HaRJODf7m60By+VGqcl5XArEjEPTvx8CdPUXDfA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "2896eb5cd7608d4a63d1b6a08761f736f58f474f"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40tailwindcss/container-queries@0.1.1",
      "group": "@tailwindcss",
      "name": "container-queries",
      "version": "0.1.1",
      "description": "A plugin for Tailwind CSS v3.2+ that provides utilities for container queries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a75f1db300a1c7a5a74d26890921b1ea54e6ac6ccd36f9b616d5e688ee80b80d55e14e51132a2ac264fa92002c20c763a34ed07407d85c727886732d7c7cd680"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40tailwindcss/container-queries@0.1.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@tailwindcss/container-queries/-/container-queries-0.1.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tailwindcss/container-queries/-/container-queries-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-10-12T10:46:23.407Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-12T14:51:53.587Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-03-31T14:50:50.368Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "malfaitrobin"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, bradlc, bradlc41@gmail.com, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, bradlc, bradlc41@gmail.com, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "40"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.03"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "28"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.03"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-insiders.f8b51dd"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-03-31T14:49:42.878Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "malfaitrobin"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-p18dswChx6WnTSaJCSGx6lTmrGzNNvm2FtXmiO6AuA1V4U5REyoqwmT6kgAsIMdjo07QdAfYXHJ4hnMtfHzWgA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "9a759ce2cb8736a4c6a0cb93aeb740573a731974"
        },
        {
          "name": "ImportedModules",
          "value": "@tailwindcss/container-queries"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "src-ui/sdc/tailwind.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40tailwindcss/forms@0.5.7",
      "group": "@tailwindcss",
      "name": "forms",
      "version": "0.5.7",
      "description": "A plugin that provides a basic reset for form styles that makes form elements easy to override with utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "404ed7ebd89023e657c25744fabcdab2f6c98b257f8eed451871f4427d96dc529bb98b6aa7c2ca732ea24b0efd7d5513e7f56f7fed1780b09e6151be515ea13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40tailwindcss/forms@0.5.7",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@tailwindcss/forms/-/forms-0.5.7.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tailwindcss/forms/-/forms-0.5.7.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-11-11T22:30:17.470Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-12T14:00:43.832Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-11-10T19:42:19.349Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "thecrypticace"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "thecrypticace@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, bradlc, bradlc41@gmail.com, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "thecrypticace, thecrypticace@gmail.com, reinink, jonathan@reinink.ca, adamwathan, adam@adamwathan.me, bradlc, bradlc41@gmail.com, malfaitrobin, malfait.robin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "84"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.42"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "63"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.02"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-insiders.e6bcd1f"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-11-10T19:28:33.501Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "adamwathan"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-QE7X69iQI+ZXwldE+rzasvbJiyV/ju1FGHH0Qn2W3FKbuYtqp8LKcy6iSw79fVUT5/Vvf+0XgLCeYVG+UV6hOw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "db5421f062a757b5f828bc9286ba626c6685e821"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40tanstack/react-virtual@3.5.0",
      "group": "@tanstack",
      "name": "react-virtual",
      "version": "3.5.0",
      "description": "Headless UI for virtualizing scrollable elements in React",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aedbe8ecac2e22fa8af736f4559e482fb7e22401271bed04885673f0550eb3eda6846a9d1a68ca21a4f55d4ed9ab4785a8bd23a272e585b6b2248fc9d9203f07"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40tanstack/react-virtual@3.5.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.5.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.5.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-02-07T15:02:24.630Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:53:08.823Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-04-29T09:10:17.486Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "tannerlinsley"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "nksaraf, nsaraf98@gmail.com, tannerlinsley, tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "nksaraf, nsaraf98@gmail.com, tannerlinsley, tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "128"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "10.76"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "3.07"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "70"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.51"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.4.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-04-18T14:55:39.436Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "tannerlinsley"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-rtvo7KwuIvqK9zb0VZ5IL7fiJAEnG+0EiFZz8FUOs+2mhGqdGmjKIaT1XU7Zq0eFqL0jonLlhbayJI/J2SA/Bw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "873b5b77cf78af563a4a11e6251ed51ee8868132"
        },
        {
          "name": "ImportedModules",
          "value": "@tanstack/react-virtual,useVirtualizer,@tanstack/react-virtual/useVirtualizer"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/package-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/%40tanstack/virtual-core@3.5.0",
      "group": "@tanstack",
      "name": "virtual-core",
      "version": "3.5.0",
      "description": "Headless UI for virtualizing scrollable elements in TS/JS + Frameworks",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a73d10a4413caa85a9cd0b42badc6046df003c23e0f57d0b959c0bdc045f1fd776a438a790a758126eee9fefbcc2c61124ef6ee2579a109db1cb6331eb1022e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40tanstack/virtual-core@3.5.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/@tanstack/virtual-core/-/virtual-core-3.5.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tanstack/virtual-core/-/virtual-core-3.5.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2022-06-01T19:55:22.058Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-15T19:53:09.880Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-04-29T09:10:14.992Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "tannerlinsley"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "nksaraf, nsaraf98@gmail.com, tannerlinsley, tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "nksaraf, nsaraf98@gmail.com, tannerlinsley, tannerlinsley@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "121"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "10.76"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "3.09"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "67"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.49"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.4.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-04-18T14:55:35.975Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "tannerlinsley"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-KnPRCkQTyqhanNC0K63GBG3wA8I+D1fQuVnAvcBF8f13akOKeQp1gSbu6f77zCxhEk727iV5oQnbHLYzHrECLg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "108208d0f1d75271300bc5560cf9a85a1fa01e89"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        }
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.12.0",
      "group": "",
      "name": "ajv",
      "version": "8.12.0",
      "description": "Another JSON Schema Validator",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b11bb592970ef722ed63104abea7d37a1f4acd91303b7493c97d474fee02683cc2e87a5319884884f2338fd5ee294eca603c2769e87985c3b08f2d50b89cc13c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@8.12.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2015-05-29T22:33:14.989Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-24T15:22:16.643Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-01-03T14:19:23.766Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "esp"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "blakeembrey, hello@blakeembrey.com, esp, e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "blakeembrey, hello@blakeembrey.com, esp, e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "361"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "50.67"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "1.96"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "350"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "25.90"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "8.11.2"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-11-13T22:16:35.050Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "esp"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "d1a0527323e22f53562c567c00991577dfbe19d1"
        },
        {
          "name": "ImportedModules",
          "value": "ajv"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/validate.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.17.1",
      "group": "",
      "name": "ajv",
      "version": "8.17.1",
      "description": "Another JSON Schema Validator",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@8.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/package-lock.json"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2015-05-29T22:33:14.989Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-04-24T15:22:16.643Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-07-12T20:42:13.485Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "esp"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "blakeembrey, hello@blakeembrey.com, esp, e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "blakeembrey, hello@blakeembrey.com, esp, e.poberezkin@me.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "361"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "38.06"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "2.00"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "355"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "19.02"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "8.16.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-06-04T19:11:12.200Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "esp"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "37d9a5c776af6bc92d7f4f9510eba4c0a60d11a6"
        },
        {
          "name": "ImportedModules",
          "value": "ajv"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/validate.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/clsx@1.2.1",
      "group": "",
      "name": "clsx",
      "version": "1.2.1",
      "description": "A tiny (228B) utility for constructing className strings conditionally.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11c47aaf96bc6e3ea9bb7c9cb1afc4fdc2951ae4e064965db325181ce92c1bf50722229f8f1cd1c58269c9507061a41e3af8216a5f5f71ce0f89d960cee80042"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/clsx@1.2.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/clsx/-/clsx-1.2.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clsx/-/clsx-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2018-12-24T22:41:29.201Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2025-06-27T10:13:06.922Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-07-06T00:06:46.535Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "lukeed"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "luke@lukeed.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "lukeed, luke@lukeed.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "lukeed, luke@lukeed.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "15"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "3.04"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "35.10"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "8"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.09"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.2.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-07-02T23:08:04.349Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "lukeed"
        },
        {
          "name": "cdx:npm:compressedCadence",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-EcR6r5a8bj6pu3ycsa/E/cKVGuTgZJZdsyUYHOksG/UHIiKfjxzRxYJpyVBwYaQeOvghal9fcc4PidlgzugAQg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "0ddc4a20a549b59c93a4116bb26f5294ca17dc12"
        },
        {
          "name": "ImportedModules",
          "value": "clsx,ClassValue,clsx/ClassValue,clsx/clsx"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/cors@2.8.5",
      "group": "",
      "name": "cors",
      "version": "2.8.5",
      "description": "Node.js CORS middleware",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2881db2c9aaeef7446aff8676eb3bdb817a2c4d1aebd2423ba5fe3745bd2fca152207d615957759e0ef3387c7e62b11f2272c6eeae27e861d0f5c0edc6ffcfea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cors@2.8.5",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2013-01-31T04:13:40.565Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-01-22T14:41:30.379Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2018-11-04T21:00:13.277Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "dougwilson"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "doug@somethingdoug.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "dougwilson, doug@somethingdoug.com, troygoode, troygoode@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "dougwilson, doug@somethingdoug.com, troygoode, troygoode@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "35"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "479.76"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "15.50"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "32"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "30.96"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.8.4"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2017-07-13T02:50:19.018Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "dougwilson"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "eac11da51592dd86b9f06f6e7ac293b3df875d29"
        },
        {
          "name": "ImportedModules",
          "value": "cors"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/server.js"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.21.2",
      "group": "",
      "name": "express",
      "version": "4.21.2",
      "description": "Fast, unopinionated, minimalist web framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbc1ea80c6409a28750b3b7d9f2eeaafa7a4daa75d17815c95b333c21091101e8e15f1fead7027b8d0b0a35ff016faed6e0b100dbe2449b5fd75ef6515bad79c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/express@4.21.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.21.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2010-12-29T19:38:25.450Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-19T12:28:53.443Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-05T22:31:40.945Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "jonchurch"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "npm@jonchurch.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "dougwilson, doug@somethingdoug.com, wesleytodd, wes@wesleytodd.com, jonchurch, npm@jonchurch.com, ulisesgascon, ulisesgascondev@gmail.com, blakeembrey, hello@blakeembrey.com, sheplu, jean.burellier@gmail.com, linusu, linus@folkdatorn.se, mikeal, mikeal.rogers@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "wesleytodd, wes@wesleytodd.com, dougwilson, doug@somethingdoug.com, linusu, linus@folkdatorn.se, sheplu, jean.burellier@gmail.com, blakeembrey, hello@blakeembrey.com, ulisesgascon, ulisesgascondev@gmail.com, mikeal, mikeal.rogers@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "16"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.88"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "318"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "58.12"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "2.77"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "310"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "20.96"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "5.0.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-10-08T19:42:44.129Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "ulisesgascon"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "cf250e48362174ead6cea4a566abef0162c1ec32"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        },
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/server.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fhirpath@3.9.0",
      "group": "",
      "name": "fhirpath",
      "version": "3.9.0",
      "description": "A FHIRPath engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a87da0fe945e2934de8b71f74db91557c3e899aee68cc1cdb588d4443a2ce176c68e9128f0ec30b8fd2b1046bab42d71def1adab51c6960b4b0c56461dc2ba7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fhirpath@3.9.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/fhirpath/-/fhirpath-3.9.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fhirpath/-/fhirpath-3.9.0.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "fhirpath"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2018-08-01T22:57:53.217Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T18:15:43.505Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-11-09T16:10:39.659Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "yury-sedinkin"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "yuriy.sedinkin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "plynchnlm, plynch@mail.nih.gov, yury-sedinkin, yuriy.sedinkin@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "plynchnlm, plynch@mail.nih.gov, yury-sedinkin, yuriy.sedinkin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "143"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "12.81"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "13.99"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "90"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.92"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.8.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-10-27T20:38:37.223Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "yury-sedinkin"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-qH2g/pReKTTei3H3TbkVV8Poma7mjMHNtYjURDos4XbGjpEo8OwwuP0rEEa6tC1x3vGtq1HGlgtLDFZGHcK6fg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "0355154ecfec81a991543b4f91dcb7707c2606cf"
        },
        {
          "name": "ExportedModules",
          "value": "fhirpath"
        },
        {
          "name": "ImportedModules",
          "value": "fhirpath,default,fhirpath/default"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/legacy-tests/reference-implementation/extractor.js"
          },
          {
            "location": "sof-test/legacy-tests/reference-implementation/index.js"
          },
          {
            "location": "sof-test/sof-js/src/path.js"
          },
          {
            "location": "sof-test/test_report/prepare.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fhirpath@4.9.1",
      "group": "",
      "name": "fhirpath",
      "version": "4.9.1",
      "description": "A FHIRPath engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49411b9969b663b12d5f7402b85797297b9c58b8df8c78a5be099e3768ef92fbb16398c67a176ec88450b55efe31ffc8c6b7b214aad4c9e5da46e63a1be2313c"
        }
      ],
      "licenses": [
        {
          "expression": "SEE LICENSE in LICENSE.md"
        }
      ],
      "purl": "pkg:npm/fhirpath@4.9.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/fhirpath/-/fhirpath-4.9.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fhirpath/-/fhirpath-4.9.1.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "fhirpath"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2018-08-01T22:57:53.217Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-29T18:15:43.505Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-18T16:37:15.098Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "plynchnlm"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "plynch@mail.nih.gov"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "plynchnlm, plynch@mail.nih.gov, yury-sedinkin, yuriy.sedinkin@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "plynchnlm, plynch@mail.nih.gov, yury-sedinkin, yuriy.sedinkin@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "143"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1.07"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "13.40"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "136"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.08"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "4.9.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-17T14:50:47.637Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "yury-sedinkin"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-SUEbmWm2Y7EtX3QCuFeXKXucWLjfjHilvgmeN2jvkvuxY5jGehduyIRQtV7+Mf/IxreyFKrUyeXaRuY6G+IxPA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "dbbbed2c41d972013c3e0e43597eb6d9f48ca9af"
        },
        {
          "name": "ExportedModules",
          "value": "fhirpath"
        },
        {
          "name": "ImportedModules",
          "value": "fhirpath,default,fhirpath/default"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/legacy-tests/reference-implementation/extractor.js"
          },
          {
            "location": "sof-test/legacy-tests/reference-implementation/index.js"
          },
          {
            "location": "sof-test/sof-js/src/path.js"
          },
          {
            "location": "sof-test/test_report/prepare.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fuse.js@7.0.0",
      "group": "",
      "name": "fuse.js",
      "version": "7.0.0",
      "description": "Lightweight fuzzy-search",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d78178841231a8abc3e19cff5e30dcdf2f7898d64dea946fdd4d7751da3494d2c2591054b2b32fdb1c1c17fcbf679b15ebe1505befe8c3af1c1e99b8b2e9edf1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/fuse.js@7.0.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.0.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.0.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2013-11-29T15:40:45.158Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-05T22:22:52.501Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2023-10-25T15:10:54.463Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "krisk"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "krisk, kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "krisk, kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "130"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "532.55"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "2.84"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "114"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "187.69"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "6.6.2"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-05-11T02:01:51.018Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "krisk"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-14F4hBIxqKvD4Zz/XjDc3y94mNZN6pRv3U13Udo0lNLCWRBUsrMv2xwcF/y/Z5sV6+FQW+/ow68cHpm4sunt8Q=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "6573c9fcd4c8268e403b4fc7d7131ffcf99a9eb2"
        },
        {
          "name": "ImportedModules",
          "value": "fuse.js,IFuseOptions,fuse.js/IFuseOptions"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/utils/fuzzy-search.ts"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/analytics.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fuse.js@7.1.0",
      "group": "",
      "name": "fuse.js",
      "version": "7.1.0",
      "description": "Lightweight fuzzy-search",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6b2dfe12ceeb94c5fbac6400cb20d8fe744f1c94ad5faca766aa224d6f512cef97e6239a18e97da6c4b5547222cb8f1ab0ff1afbd83872fa5111e9d19dd3615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/fuse.js@7.1.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.1.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.1.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2013-11-29T15:40:45.158Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-05T22:22:52.501Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-02-03T00:43:03.870Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "krisk"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "krisk, kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "krisk, kirollos@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "130"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "466.40"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "2.86"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "115"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "162.92"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "7.0.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-10-25T15:10:54.463Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "krisk"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-trLf4SzuuUxfusZADLINj+dE8clK1frKdmqiJNb1Es75fmI5oY6X2mxLVUciLLjxqw/xr72Dhy+lER6dGd02FQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "306228b4befeee11e05b027087c2744158527d09"
        },
        {
          "name": "ImportedModules",
          "value": "fuse.js,IFuseOptions,fuse.js/IFuseOptions"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/utils/fuzzy-search.ts"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/analytics.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-11-02T01:56:02.870Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-04T13:18:06.292Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2020-12-07T19:45:10.828Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "vitaly"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "vitaly@rcdesign.ru"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "vitaly, vitaly@rcdesign.ru"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "vitaly, vitaly@rcdesign.ru"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "76"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "199.05"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "25.96"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "69"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "7.67"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.14.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2020-05-22T18:30:32.680Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "vitaly"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "dae812fdb3825fa306609a8717383c50c36a0537"
        },
        {
          "name": "ImportedModules",
          "value": "js-yaml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/components/AccessPolicy/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-event-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/action.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.$id.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.1",
      "group": "",
      "name": "js-yaml",
      "version": "4.1.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a90293e334315e5f252f006d1cc5b06937067c5399be23897addcecbfc661a4da0647ebbec224cf44bed7dd4a48167004d9863ff9e49674ae6cb79b2093e65b0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-11-02T01:56:02.870Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-04T13:18:06.292Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-11-12T15:18:03.524Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "vitaly"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "vitaly@rcopen.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "vitaly, vitaly@rcopen.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "vitaly, vitaly@rcdesign.ru"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "1"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.33"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "76"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "1672.76"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "27.11"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "72"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "61.71"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "4.1.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2021-04-14T21:07:09.057Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "vitaly"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "854c292467705b699476e1a2decc0c8a3458806b"
        },
        {
          "name": "ImportedModules",
          "value": "js-yaml"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/src/components/AccessPolicy/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-event-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/action.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.$id.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/path@0.12.7",
      "group": "",
      "name": "path",
      "version": "0.12.7",
      "description": "Node.JS path module",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path@0.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-06-29T23:52:16.174Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2023-05-20T13:42:09.760Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2015-09-13T15:17:56.689Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "jinder"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "jindersidhu@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, jinder, jindersidhu@gmail.com, defunctzombie, shtylman@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, shtylman, shtylman@gmail.com, jinder, jindersidhu@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "5"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.71"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "248.75"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "643.95"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.11.14"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2015-01-07T21:18:43.564Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "jinder"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-aXXC6s+1w7otVF9UletFkFcDsJeO7lSZBPUQhtb5O0xJe8LtYhj/GxldoL09bBj9+ZmE2hNoHqQSFMN5fikh4Q=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "d4dc2a506c4ce2197eb481ebfcd5b36c0140b10f"
        },
        {
          "name": "ImportedModules",
          "value": "path"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/server/db.js"
          },
          {
            "location": "sof-test/sof-js/src/server/export.js"
          },
          {
            "location": "sof-test/sof-js/src/server/utils.js"
          },
          {
            "location": "sof-test/test_report/prepare.js"
          },
          {
            "location": "sof-test/test_report/scripts/setupTypeScript.js"
          },
          {
            "location": "sdc-playwright/page-object/components/renderer.ts"
          },
          {
            "location": "sdc-playwright/utils/screenshots.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "description": "process information for node.js and browsers",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d19e7ff76b585a32743d49b0ccee15ff35d349d997e193fb269c7366c471e7797fd463938cfe5ad1544c1bbd3e13a2f63fe37e604fbb498c118e3021d005f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-06-30T01:07:03.273Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2025-10-13T17:09:40.286Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2017-04-26T12:34:27.448Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "cwmma"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "calvin.metcalf@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, cwmma, calvin.metcalf@gmail.com, defunctzombie, shtylman@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, cwmma, calvin.metcalf@gmail.com, defunctzombie, shtylman@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "21"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "238.68"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "42.78"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "19"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "5.58"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.11.9"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2016-08-30T20:09:13.289Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "cwmma"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "7332300e840161bda3e69a1d1d91a7d4bc16f182"
        },
        {
          "name": "ImportedModules",
          "value": "process"
        },
        {
          "name": "SrcFile",
          "value": "sof-test/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/test_report/scripts/setupTypeScript.js"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@18.2.0",
      "group": "",
      "name": "react-dom",
      "version": "18.2.0",
      "description": "React package for working with the DOM.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e88313ae2526bec8c752336d103b9d65fb83414a165d5c4a1e194419293cd67e18152fabfca97df705e2c25557b4f06d25e9e8cefd8ffa1c43b30f5e03b5e8ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react-dom@18.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2014-05-06T18:59:36.160Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T17:16:19.256Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-06-14T19:46:48.370Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "gnoff"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "jcs.gnoff@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "gaearon, dan.abramov@gmail.com, zpao, paul@oshannessy.com, acdlite, npm@andrewclark.io, gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, trueadm, dg@domgan.com, sophiebits, npm@sophiebits.com, lunaruan, lunaris.ruan@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "gaearon, dan.abramov@gmail.com, zpao, paul@oshannessy.com, acdlite, npm@andrewclark.io, fb, opensource+npm@fb.com, trueadm, dg@domgan.com, sophiebits, npm@sophiebits.com, lunaruan, lunaris.ruan@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "16"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.88"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "2788"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.15"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.84"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "891"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.18"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-experimental-be229c565-20220613"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-06-14T16:14:05.071Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "acdlite"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-6IMTriUmvsjHUjNtEDudZfuDQUoWXVxKHhlEGSk81n4YFS+r/Kl99wXiwlVXtPBtJenozv2P+hxDsw9eA7Xo6g=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "22aaf38708db2674ed9ada224ca4aa708d821e3d"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom/client,createRoot,react-dom/client/createRoot,react-dom,flushSync,react-dom/flushSync,createPortal,react-dom/createPortal"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar-slot.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-form-dialog.tsx"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@18.3.1",
      "group": "",
      "name": "react-dom",
      "version": "18.3.1",
      "description": "React package for working with the DOM.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e66e2740aa7ead945bd3d2cd1f9f463380714e1f76e75ff295b2886e97bb4e91b17c9fbd92fe812e42c15c88e3b296e06e720136a948db7b519d3593d2c9d423"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react-dom@18.3.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2014-05-06T18:59:36.160Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T17:16:19.256Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-04-26T16:42:49.931Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "zpao, paul@oshannessy.com, gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, sophiebits, npm@sophiebits.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "zpao, paul@oshannessy.com, gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, sophiebits, npm@sophiebits.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "10"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "2788"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.89"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.27"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "1695"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "3.31"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-experimental-94eed63c49-20240425"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-04-25T19:17:29.998Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "c2265d79511b57d479b3dd3fdfa51536494c5cb4"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom/client,createRoot,react-dom/client/createRoot,react-dom,flushSync,react-dom/flushSync,createPortal,react-dom/createPortal"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar-slot.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-form-dialog.tsx"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/react@18.2.0",
      "group": "",
      "name": "react",
      "version": "18.2.0",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff722331d6f62fd41b05d5a25b97b73f6fe7a70301694f661c24825333659f464261b71f4ec19b4c9ad4fe419e99d1f6216981da2a19fb3931b66aba834f5f19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react@18.2.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-18.2.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-10-26T17:46:21.942Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T17:16:06.784Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2022-06-14T19:46:38.369Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "gnoff"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "jcs.gnoff@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "gaearon, dan.abramov@gmail.com, acdlite, npm@andrewclark.io, gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, trueadm, dg@domgan.com, sophiebits, npm@sophiebits.com, lunaruan, lunaris.ruan@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "gaearon, dan.abramov@gmail.com, acdlite, npm@andrewclark.io, fb, opensource+npm@fb.com, trueadm, dg@domgan.com, sophiebits, npm@sophiebits.com, lunaruan, lunaris.ruan@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "14"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "12"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "0.86"
        },
        {
          "name": "cdx:npm:maintainerSetPartialDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "2833"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.15"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.91"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "936"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.16"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-experimental-be229c565-20220613"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2022-06-14T16:13:55.768Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "acdlite"
        },
        {
          "name": "cdx:npm:publisherDrift",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "555bd98592883255fa00de14f1151a917b5d77d5"
        },
        {
          "name": "ImportedModules",
          "value": "react,useEffect,react/useEffect,useCallback,react/useCallback,useRef,react/useRef,useState,react/useState,RefObject,react/RefObject,createContext,react/createContext,react/use,startTransition,react/startTransition,StrictMode,react/StrictMode,ReactNode,react/ReactNode,useContext,react/useContext,react/JSX,useMemo,react/useMemo,useDeferredValue,react/useDeferredValue,Dispatch,react/Dispatch,PropsWithChildren,react/PropsWithChildren,useReducer,react/useReducer,Fragment,react/Fragment,lazy,react/lazy,Suspense,react/Suspense,Children,react/Children,useSyncExternalStore,react/useSyncExternalStore,useId,react/useId"
        },
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/use-chat-websocket.ts"
          },
          {
            "location": "aidbox-ui/src/components/data-table/types.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useDebounce.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useExpandValueSet.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useGetStructureDefinition.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useUnsavedChangesBlocker.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/db-console-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "formbox-ui/src/api/forms.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/use-configuration-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/library/use-library-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-questionnaire-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/responses/use-response-filters.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "aidbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "aidbox-ui/src/api/utils.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-event-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-filters.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/translate-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/DataLineage/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/Home/DataImport.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/canonical-resource.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/import-package.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/package-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/action.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/edit-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/profile-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/base-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/node-search.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/run-inputs.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/indexes-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/query-runner.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/stats-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/graph-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-form-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-lsp-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/info-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/resource-type-select.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/result-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/schema-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/search-bar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/sql-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-message.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-messages.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-widget.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/element-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/confirm-dialog.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/data-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/footer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/running-queries.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/schema-explorer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/search-params-stats.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/active-queries-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/empty-state.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/collections.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/headers-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/url-autocomplete.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-card.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/bool-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/enum-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/text-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/settings-sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/humanize.tsx"
          },
          {
            "location": "aidbox-ui/src/index.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/analytics.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/db-console.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.$id.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/settings.tsx"
          },
          {
            "location": "aidbox-ui/src/shared/vim-mode.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/highlight.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/infinite-scroll.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "formbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "formbox-ui/src/components/renderer.tsx"
          },
          {
            "location": "formbox-ui/src/index.tsx"
          },
          {
            "location": "formbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar-slot.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "formbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-page.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-form.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-renderer.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations.tsx"
          },
          {
            "location": "formbox-ui/src/pages/library.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/filter-field.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/import-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/resource-search-select.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires.tsx"
          },
          {
            "location": "formbox-ui/src/pages/responses/responses-table.tsx"
          },
          {
            "location": "formbox-ui/src/pages/shared.tsx"
          },
          {
            "location": "formbox-ui/src/shared/vim-mode.tsx"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/react@18.3.1",
      "group": "",
      "name": "react",
      "version": "18.3.1",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c12fa1020252851d0a844bcf240adfb8f54dd7e1f3d6dd18ea7e632eb1906e46f8bab80f13fd11bdefb590c075bffa16807826e1621c57e8bb176a53563fb689"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react@18.3.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/react/-/react-18.3.1.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-18.3.1.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-10-26T17:46:21.942Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T17:16:06.784Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-04-26T16:42:26.496Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, sophiebits, npm@sophiebits.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "gnoff, jcs.gnoff@gmail.com, fb, opensource+npm@fb.com, sophiebits, npm@sophiebits.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "8"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "2833"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.89"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.45"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "1740"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "2.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-experimental-94eed63c49-20240425"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-04-25T19:17:16.550Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "49ab892009c53933625bd16b2533fc754cab2891"
        },
        {
          "name": "ImportedModules",
          "value": "react,useEffect,react/useEffect,useCallback,react/useCallback,useRef,react/useRef,useState,react/useState,RefObject,react/RefObject,createContext,react/createContext,react/use,startTransition,react/startTransition,StrictMode,react/StrictMode,ReactNode,react/ReactNode,useContext,react/useContext,react/JSX,useMemo,react/useMemo,useDeferredValue,react/useDeferredValue,Dispatch,react/Dispatch,PropsWithChildren,react/PropsWithChildren,useReducer,react/useReducer,Fragment,react/Fragment,lazy,react/lazy,Suspense,react/Suspense,Children,react/Children,useSyncExternalStore,react/useSyncExternalStore,useId,react/useId"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/use-chat-websocket.ts"
          },
          {
            "location": "aidbox-ui/src/components/data-table/types.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useDebounce.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useExpandValueSet.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useGetStructureDefinition.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useUnsavedChangesBlocker.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/db-console-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "formbox-ui/src/api/forms.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/use-configuration-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/library/use-library-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-questionnaire-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/responses/use-response-filters.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "aidbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "aidbox-ui/src/api/utils.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-event-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-filters.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/translate-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/DataLineage/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/Home/DataImport.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/canonical-resource.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/import-package.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/package-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/action.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/edit-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/profile-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/base-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/node-search.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/run-inputs.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/indexes-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/query-runner.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/stats-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/graph-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-form-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-lsp-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/info-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/resource-type-select.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/result-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/schema-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/search-bar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/sql-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-message.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-messages.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-widget.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/element-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/confirm-dialog.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/data-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/footer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/running-queries.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/schema-explorer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/search-params-stats.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/active-queries-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/empty-state.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/collections.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/headers-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/url-autocomplete.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-card.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/bool-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/enum-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/text-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/settings-sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/humanize.tsx"
          },
          {
            "location": "aidbox-ui/src/index.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/analytics.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/db-console.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.$id.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/settings.tsx"
          },
          {
            "location": "aidbox-ui/src/shared/vim-mode.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/highlight.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/infinite-scroll.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "formbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "formbox-ui/src/components/renderer.tsx"
          },
          {
            "location": "formbox-ui/src/index.tsx"
          },
          {
            "location": "formbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar-slot.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "formbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-page.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-form.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-renderer.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations.tsx"
          },
          {
            "location": "formbox-ui/src/pages/library.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/filter-field.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/import-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/resource-search-select.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires.tsx"
          },
          {
            "location": "formbox-ui/src/pages/responses/responses-table.tsx"
          },
          {
            "location": "formbox-ui/src/pages/shared.tsx"
          },
          {
            "location": "formbox-ui/src/shared/vim-mode.tsx"
          }
        ]
      }
    },
    {
      "type": "framework",
      "bom-ref": "pkg:npm/react@19.2.5",
      "group": "",
      "name": "react",
      "version": "19.2.5",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9655092f3cf5cd3501aec92dda9c1980bab9f407a689f21fb70e1a07b2713aa7f51d8d850da183c60c2900f5731d4d6475669b1fb15ab8fe22d6811e7abd9608"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react@19.2.5",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/react/-/react-19.2.5.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-19.2.5.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-10-26T17:46:21.942Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T17:16:06.784Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-04-08T18:39:24.455Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "fb, opensource+npm@fb.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "fb, opensource+npm@fb.com, react-bot, react-core@meta.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "4"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "2833"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "5.09"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.17"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "2769"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "30.49"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.0.0-experimental-1b45e243-20260402"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-04-03T16:25:10.313Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "react-bot"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "c888ab8b8ef33e2597fae8bdb2d77edbdb42858b"
        },
        {
          "name": "ImportedModules",
          "value": "react,useEffect,react/useEffect,useCallback,react/useCallback,useRef,react/useRef,useState,react/useState,RefObject,react/RefObject,createContext,react/createContext,react/use,startTransition,react/startTransition,StrictMode,react/StrictMode,ReactNode,react/ReactNode,useContext,react/useContext,react/JSX,useMemo,react/useMemo,useDeferredValue,react/useDeferredValue,Dispatch,react/Dispatch,PropsWithChildren,react/PropsWithChildren,useReducer,react/useReducer,Fragment,react/Fragment,lazy,react/lazy,Suspense,react/Suspense,Children,react/Children,useSyncExternalStore,react/useSyncExternalStore,useId,react/useId"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/run-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-context.ts"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/use-chat-websocket.ts"
          },
          {
            "location": "aidbox-ui/src/components/data-table/types.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useDebounce.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useExpandValueSet.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useGetStructureDefinition.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useUnsavedChangesBlocker.ts"
          },
          {
            "location": "aidbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/canonical-resource.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/db-console-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser-context.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/ig-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/import-package.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/package-detail.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-browser.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-editor.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/resource-instances.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/rest-console.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/sql.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "aidbox-ui/src/webmcp/view-definition.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-fhirpath-lsp/src/hooks.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/hooks/use-mobile.ts"
          },
          {
            "location": "formbox-ui/src/api/forms.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useLocalStorage.ts"
          },
          {
            "location": "formbox-ui/src/hooks/useWindowEvent.ts"
          },
          {
            "location": "formbox-ui/src/pages/configurations/use-configuration-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/library/use-library-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-questionnaire-filters.ts"
          },
          {
            "location": "formbox-ui/src/pages/responses/use-response-filters.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "aidbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "aidbox-ui/src/api/utils.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/dev-tool-request-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AccessPolicy/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AsyncOperations/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-event-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-filters.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/audit-events-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/AuditEvents/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/CodeSystem/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ConceptMap/translate-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/DataLineage/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/Home/DataImport.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/canonical-resource.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/import-package.tsx"
          },
          {
            "location": "aidbox-ui/src/components/IGBrowser/package-detail.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/browser.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceBrowser/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/action.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/edit-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/profile-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ResourceEditor/versions-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/base-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/node-search.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/lineage/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/run-inputs.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SQLQueryBuilder/sql-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/indexes-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/query-runner.tsx"
          },
          {
            "location": "aidbox-ui/src/components/SearchParameter/stats-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/builder-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/detail-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/graph-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/graph/nodes.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/header-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ValueSet/properties-tree.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-code-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-form-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/editor-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/example-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/fhirpath-lsp-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/info-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/expand-node.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/lineage/lineage-tab.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/page.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/resource-type-select.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/result-panel-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/schema-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/search-bar.tsx"
          },
          {
            "location": "aidbox-ui/src/components/ViewDefinition/sql-tab-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-context.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-input.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-message.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-messages.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/chat-widget.tsx"
          },
          {
            "location": "aidbox-ui/src/components/claude-chat/element-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/confirm-dialog.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/data-table.tsx"
          },
          {
            "location": "aidbox-ui/src/components/data-table/footer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/running-queries.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/schema-explorer.tsx"
          },
          {
            "location": "aidbox-ui/src/components/database/search-params-stats.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/active-queries-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-content.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/result-panel.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/db-console/tables-view.tsx"
          },
          {
            "location": "aidbox-ui/src/components/empty-state.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/notebook-resource-picker.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/collections.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/headers-editor.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/left-menu.tsx"
          },
          {
            "location": "aidbox-ui/src/components/rest/url-autocomplete.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-card.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/bool-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/enum-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/setting-controls/text-setting.tsx"
          },
          {
            "location": "aidbox-ui/src/components/settings/settings-sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/humanize.tsx"
          },
          {
            "location": "aidbox-ui/src/index.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "aidbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/analytics.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/db-console.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.$id.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/notebooks.index.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/rest.tsx"
          },
          {
            "location": "aidbox-ui/src/routes/settings.tsx"
          },
          {
            "location": "aidbox-ui/src/shared/vim-mode.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/highlight.tsx"
          },
          {
            "location": "aidbox-ui/src/utils/infinite-scroll.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/create-react-app/template/src/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/button-dropdown.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor/index.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/code-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/copy-icon.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/date-picker-input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/fhir-structure-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/icon-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/operation-outcome-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/request-line-editor.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/sandbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/segment-control.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/split-button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tag.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tile.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/toolbar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/components/tree-view.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/accordion.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert-dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/alert.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/avatar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/badge.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/breadcrumb.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/button.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/calendar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/carousel.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/chart.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/checkbox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/collapsible.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/combobox.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/command.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/context-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dialog.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/drawer.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/dropdown-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/hover-card.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input-otp.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/input.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/label.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/menubar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/navigation-menu.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/pagination.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/popover.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/progress.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-button-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/radio-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/resizable.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/scroll-area.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/select.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/separator.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sheet.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sidebar.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/slider.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/sonner.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/switch.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/table.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tabs.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/textarea.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle-group.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/toggle.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tooltip.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/tree.tsx"
          },
          {
            "location": "formbox-ui/src/AidboxClient.tsx"
          },
          {
            "location": "formbox-ui/src/components/renderer.tsx"
          },
          {
            "location": "formbox-ui/src/index.tsx"
          },
          {
            "location": "formbox-ui/src/layout/layout.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar-slot.tsx"
          },
          {
            "location": "formbox-ui/src/layout/navbar.tsx"
          },
          {
            "location": "formbox-ui/src/layout/sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-page.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-editor-sidebar.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-form.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations/configuration-renderer.tsx"
          },
          {
            "location": "formbox-ui/src/pages/configurations.tsx"
          },
          {
            "location": "formbox-ui/src/pages/library.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/filter-field.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/import-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/resource-search-select.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires/use-form-dialog.tsx"
          },
          {
            "location": "formbox-ui/src/pages/questionnaires.tsx"
          },
          {
            "location": "formbox-ui/src/pages/responses/responses-table.tsx"
          },
          {
            "location": "formbox-ui/src/pages/shared.tsx"
          },
          {
            "location": "formbox-ui/src/shared/vim-mode.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/sqlite3@5.1.7",
      "group": "",
      "name": "sqlite3",
      "version": "5.1.7",
      "description": "Asynchronous, non-blocking SQLite3 bindings",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1862323a215a1be4d4adadc921f908ff318ff326582cf434a65d5b1fe3838e25f9eec3e1acb539b10267d72f5b0ca654158917d5cae5acf7d262dd0128a764a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/sqlite3@5.1.7",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/sqlite3/-/sqlite3-5.1.7.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/sof-js/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sqlite3/-/sqlite3-5.1.7.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-02-24T15:45:51.936Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-03-12T15:28:29.587Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-01-05T08:48:16.555Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "daniellockyer"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "hi@daniellockyer.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "springmeyer, dane.springmeyer@gmail.com, kkaefer, mail@kkaefer.com, tmcw, tom@macwright.com, erisds, github.erisds@gmail.com, yhahn, young@mapbox.com, mapsam, sam@mapbox.com, zmully, mully@mapbox.com, kewde_, kewde@particl.io, daniellockyer, hi@daniellockyer.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "springmeyer, dane.springmeyer@gmail.com, kkaefer, mail@kkaefer.com, tmcw, tom@macwright.com, erisds, github.erisds@gmail.com, yhahn, young@mapbox.com, mapsam, sam@mapbox.com, zmully, mully@mapbox.com, kewde_, kewde@particl.io, daniellockyer, hi@daniellockyer.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "18"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "18"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "18"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "106"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "6.91"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "15.02"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "103"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.46"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "5.1.7-rc.0"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-12-29T11:04:15.427Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "daniellockyer"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-GGIyOiFaG+TUra3JIfkI/zGP8yZYLPQ0pl1bH+ODjiX57sPhrLU5sQJn1y9bDKZUFYkX1crlrPfSYt0BKKdkog=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "59ca1053c1ab38647396586edad019b1551041b7"
        },
        {
          "name": "ImportedModules",
          "value": "sqlite3"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/sof-js/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/server/db.js"
          },
          {
            "location": "sof-test/sof-js/src/server/sql.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tailwind-merge@2.5.2",
      "group": "",
      "name": "tailwind-merge",
      "version": "2.5.2",
      "description": "Merge Tailwind CSS classes without style conflicts",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9231019bea6f0fee9e030cc92f6062fb4dbff4b14b6a5d46b3ad7e401ec7bd37d0434697c02e4b193f0f12dd604b40962a4b4a7bacac3d3032ddc042e4c7a222"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tailwind-merge@2.5.2",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-2.5.2.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-07-18T10:36:26.319Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T16:32:54.062Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-08-12T18:31:41.429Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "dcas"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "dcas, tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "dcas, tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "435"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.07"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "269"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.04"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.5.2-dev.a72f2f474fbba41c9940d3c9737cd3ad431d68da"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-08-12T18:28:12.385Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "dcas"
        },
        {
          "name": "cdx:npm:trustedPublishing",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-kjEBm+pvD+6eAwzJL2Bi+02/9LFLal1Gs61+QB7HvTfQQ0aXwC5LGT8PEt1gS0CWKktKe6ysPTAy3cBC5MeiIg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "000f05a703058f9f9f3829c644235f81d4c08a1f"
        },
        {
          "name": "cdx:npm:provenanceUrl",
          "value": "https://registry.npmjs.org/-/npm/v1/attestations/tailwind-merge@2.5.2"
        },
        {
          "name": "ImportedModules",
          "value": "tailwind-merge,twMerge,tailwind-merge/twMerge"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tailwind-merge@2.6.0",
      "group": "",
      "name": "tailwind-merge",
      "version": "2.6.0",
      "description": "Merge Tailwind CSS classes without style conflicts",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fe56ed6a5dfcde7628ab987382df1286018799b4f715f60efa5fec60d850f8b58811ef57b0300df9637b02cf7ce188dfddc1e7d1a495f4c81720c22d5f5cd40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tailwind-merge@2.6.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-2.6.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-2.6.0.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2021-07-18T10:36:26.319Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-06-17T16:32:54.062Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-12-23T16:45:58.371Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "dcas"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "dcas, tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "dcas, tinge_07defunct@icloud.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "435"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.07"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "304"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "2.6.0-dev.1a92c358e0ecc910296be7fce6635ad6f685be87"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2024-12-23T16:44:53.492Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "dcas"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-P+Vu1qXfzediirmHOC3xKGAYeZtPcV9g76X+xg2FD4tYgR71ewMA35Y3sCz3zhiN/dwefRpJX0yBcgwi1fXNQA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "ac5fb7e227910c038d458f396b7400d93a3142d5"
        },
        {
          "name": "ImportedModules",
          "value": "tailwind-merge,twMerge,tailwind-merge/twMerge"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/lib/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.4",
      "group": "",
      "name": "url",
      "version": "0.11.4",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a02c1d542ee64ee5a23f28cb533fc23b3e532e4eb0829d110ac37ec076761249de69cf70f2eb95d278dc6db89ed8c13e56cf9de9dbb0998b91dc78105ecd5f3a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.4",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/url/-/url-0.11.4.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/fhir-clj/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url/-/url-0.11.4.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-07-07T22:16:05.456Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2025-10-13T17:09:19.860Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2024-07-26T19:54:21.898Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "ljharb"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "ljharb@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, ljharb, ljharb@gmail.com, defunctzombie, shtylman@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "coolaj86, coolaj86@gmail.com, ljharb, ljharb@gmail.com, defunctzombie, shtylman@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "6"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "11"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "315.89"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "180.87"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "9"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "1.75"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "0.11.3"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2023-09-14T22:38:37.401Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "ljharb"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-oCwdVC7mTuWiPyjLUz/COz5TLk6wgp0RCsN+wHZ2Ekneac9w8uuV0njcbbie2ME+Vs+d6duwmYuR3HgQXs1fOg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "adca77b3562d56b72746e76b330b7f27b6721f3c"
        },
        {
          "name": "ImportedModules",
          "value": "url,fileURLToPath,url/fileURLToPath"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/fhir-clj/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "sof-test/sof-js/src/server/utils.js"
          },
          {
            "location": "sof-test/sof-js/src/server.js"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.2",
      "group": "",
      "name": "yaml",
      "version": "1.10.2",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yaml@1.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "sof-test/package-lock.json"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-04-15T16:25:52.216Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-11T10:16:24.145Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2021-03-13T21:02:56.363Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "103"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.42"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "13.76"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "52"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.03"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.10.1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2021-03-13T11:03:58.138Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "2301c5ffbf12b467de8da2333a459e29e7920e4b"
        },
        {
          "name": "ImportedModules",
          "value": "yaml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/sof-test/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.8.3",
      "group": "",
      "name": "yaml",
      "version": "2.8.3",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f6da08b38ed8eb70fe55b96e687d77f58475c0c5750a766766541f7a57f54da2872518d27bcbbfb27a4eb5a8c2495118f61b07f22e20c7d88316823e0e41a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.8.3",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-04-15T16:25:52.216Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-11T10:16:24.145Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-03-21T10:37:06.001Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "103"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "22.13"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "98"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "1.10.3"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-03-21T10:28:32.082Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:compressedCadence",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "a0d6bd2efb3dd03c59370223701834e60409bd7d"
        },
        {
          "name": "ImportedModules",
          "value": "yaml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.9.0",
      "group": "",
      "name": "yaml",
      "version": "2.9.0",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d80be1357de66fccdde99cbb20d4ed4a9975175e475ba5a7aa3d2cad696428b729625fe03083098b2b86ab629e236605c543e376507edcb735d2c78c2ed2f870"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.9.0",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "libs/hs_ui/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz"
        },
        {
          "name": "cdx:npm:bin",
          "value": "yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2011-04-15T16:25:52.216Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-11T10:16:24.145Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-05-11T10:16:24.045Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "eemeli, eemeli@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "103"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "8.79"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "20.44"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "101"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.43"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.0.0-1"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-05-02T15:21:39.628Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "eemeli"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "78274afd93598a1dfdd6130df6a566defcbf9aa4"
        },
        {
          "name": "ImportedModules",
          "value": "yaml"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/libs/hs_ui/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/aidbox-client/src/utils.ts"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/zod@3.25.76",
      "group": "",
      "name": "zod",
      "version": "3.25.76",
      "description": "TypeScript-first schema declaration and validation library with static type inference",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83352dfeab7cd675ec14628815c0b76277c4031e4d92e9c27e70e5bee0524854b4d9b717bb82e679ad001485306cb5b158fc7777da7c4b94286ae8ca70d43171"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/zod@3.25.76",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-03-07T21:19:15.387Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-04T18:06:03.234Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2025-07-08T09:10:18.684Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "colinhacks"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colinhacks, colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colinhacks, colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "875"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.00"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.04"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "694"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.05"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "3.26.0-canary.20250708T090717"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2025-07-08T09:07:21.511Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "colinhacks"
        },
        {
          "name": "cdx:npm:trustedPublishing",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "26841c3f6fd22a6a2760e7ccb719179768471e34"
        },
        {
          "name": "cdx:npm:provenanceUrl",
          "value": "https://registry.npmjs.org/-/npm/v1/attestations/zod@3.25.76"
        },
        {
          "name": "ImportedModules",
          "value": "zod,zod/z"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "formbox-ui/src/pages/configurations/configuration-form-values.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.stories.tsx"
          }
        ]
      }
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/zod@4.3.6",
      "group": "",
      "name": "zod",
      "version": "4.3.6",
      "description": "TypeScript-first schema declaration and validation library with static type inference",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "adfb65ae484764e7230f090696752d65992f68f1c2b03013a78a46a6e38e3036937430d717dd70b950c9a16a0fb0a5ffdd83d0e5f1ee1774938dc6322abf9086"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/zod@4.3.6",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz"
        },
        {
          "name": "cdx:npm:packageCreatedTime",
          "value": "2020-03-07T21:19:15.387Z"
        },
        {
          "name": "cdx:npm:lastModifiedTime",
          "value": "2026-05-04T18:06:03.234Z"
        },
        {
          "name": "cdx:npm:publishTime",
          "value": "2026-01-22T19:14:35.382Z"
        },
        {
          "name": "cdx:npm:publisher",
          "value": "colinhacks"
        },
        {
          "name": "cdx:npm:publisherEmail",
          "value": "colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSet",
          "value": "colinhacks, colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:priorMaintainerSet",
          "value": "colinhacks, colinmcd94@gmail.com"
        },
        {
          "name": "cdx:npm:maintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:priorMaintainerSetCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapCount",
          "value": "2"
        },
        {
          "name": "cdx:npm:maintainerOverlapRatio",
          "value": "1.00"
        },
        {
          "name": "cdx:npm:versionCount",
          "value": "875"
        },
        {
          "name": "cdx:npm:releaseGapDays",
          "value": "0.01"
        },
        {
          "name": "cdx:npm:releaseGapBaselineDays",
          "value": "0.04"
        },
        {
          "name": "cdx:npm:releaseGapSampleSize",
          "value": "854"
        },
        {
          "name": "cdx:npm:releaseCadenceCompressionRatio",
          "value": "0.13"
        },
        {
          "name": "cdx:npm:priorVersion",
          "value": "4.4.0-canary.20260122T190614"
        },
        {
          "name": "cdx:npm:priorPublishTime",
          "value": "2026-01-22T19:06:17.911Z"
        },
        {
          "name": "cdx:npm:priorPublisher",
          "value": "colinhacks"
        },
        {
          "name": "cdx:npm:trustedPublishing",
          "value": "true"
        },
        {
          "name": "cdx:npm:artifactIntegrity",
          "value": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="
        },
        {
          "name": "cdx:npm:artifactShasum",
          "value": "89c56e0aa7d2b05107d894412227087885ab112a"
        },
        {
          "name": "cdx:npm:provenanceUrl",
          "value": "https://registry.npmjs.org/-/npm/v1/attestations/zod@4.3.6"
        },
        {
          "name": "ImportedModules",
          "value": "zod,zod/z"
        }
      ],
      "evidence": {
        "identity": {
          "field": "purl",
          "confidence": 1,
          "methods": [
            {
              "technique": "manifest-analysis",
              "confidence": 1,
              "value": "/drone/src/box/package-lock.json"
            }
          ]
        },
        "occurrences": [
          {
            "location": "formbox-ui/src/pages/configurations/configuration-form-values.ts"
          },
          {
            "location": "aidbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.stories.tsx"
          },
          {
            "location": "formbox-ui/aidbox-ts-sdk/packages/react-components/src/shadcn/components/ui/form.stories.tsx"
          }
        ]
      }
    },
    {
      "type": "application",
      "bom-ref": "pkg:npm/@aidbox/box",
      "group": "@aidbox",
      "name": "box",
      "purl": "pkg:npm/%40aidbox/box",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "postinstall"
        }
      ],
      "components": [
        {
          "type": "application",
          "bom-ref": "pkg:npm/mydevbox@1.0.0",
          "author": "health-samurai",
          "group": "",
          "name": "mydevbox",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT"
              }
            }
          ],
          "purl": "pkg:npm/mydevbox@1.0.0"
        },
        {
          "type": "application",
          "bom-ref": "pkg:npm/sql-on-fhir-v2@2.0.0",
          "group": "",
          "name": "sql-on-fhir-v2",
          "version": "2.0.0",
          "purl": "pkg:npm/sql-on-fhir-v2@2.0.0"
        },
        {
          "type": "application",
          "bom-ref": "pkg:npm/sof@1.0.0",
          "author": "niquola,jmandel",
          "group": "",
          "name": "sof",
          "version": "1.0.0",
          "description": "sojs framework",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "url": "https://opensource.org/licenses/BSD-2-Clause"
              }
            }
          ],
          "purl": "pkg:npm/sof@1.0.0",
          "externalReferences": [
            {
              "url": "http://www.develop.cc",
              "type": "website"
            },
            {
              "url": "git+https://github.com/zhangziqiu/sof.git",
              "type": "vcs"
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:packageCreatedTime",
              "value": "2016-10-01T10:31:58.508Z"
            },
            {
              "name": "cdx:npm:lastModifiedTime",
              "value": "2022-06-26T22:01:34.422Z"
            },
            {
              "name": "cdx:npm:publisher",
              "value": "zhangziqiu"
            },
            {
              "name": "cdx:npm:publisherEmail",
              "value": "zero@develop.cc"
            },
            {
              "name": "cdx:npm:maintainerSetCount",
              "value": "0"
            },
            {
              "name": "cdx:npm:priorMaintainerSetCount",
              "value": "0"
            },
            {
              "name": "cdx:npm:versionCount",
              "value": "1"
            }
          ]
        },
        {
          "type": "application",
          "bom-ref": "pkg:npm/sdc-tests-project@1.0.0",
          "group": "",
          "name": "sdc-tests-project",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "url": "https://opensource.org/licenses/ISC"
              }
            }
          ],
          "purl": "pkg:npm/sdc-tests-project@1.0.0"
        },
        {
          "type": "application",
          "bom-ref": "pkg:npm/hs-ui@1.0.0",
          "author": "Health Samurai",
          "group": "",
          "name": "hs-ui",
          "version": "1.0.0",
          "description": "HotSchedules UI Components",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "url": "https://opensource.org/licenses/ISC"
              }
            }
          ],
          "purl": "pkg:npm/hs-ui@1.0.0",
          "externalReferences": [
            {
              "url": "https://github.com/hotschedules/hs-ui#readme",
              "type": "vcs"
            },
            {
              "url": "git+https://github.com/hotschedules/hs-ui.git",
              "type": "vcs"
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:packageCreatedTime",
              "value": "2016-10-25T20:22:41.437Z"
            },
            {
              "name": "cdx:npm:lastModifiedTime",
              "value": "2022-06-18T21:46:34.409Z"
            },
            {
              "name": "cdx:npm:publisher",
              "value": "uzairrahim"
            },
            {
              "name": "cdx:npm:publisherEmail",
              "value": "uzair.rahim@hotschedules.com"
            },
            {
              "name": "cdx:npm:maintainerSetCount",
              "value": "0"
            },
            {
              "name": "cdx:npm:priorMaintainerSetCount",
              "value": "0"
            },
            {
              "name": "cdx:npm:versionCount",
              "value": "22"
            }
          ]
        },
        {
          "type": "application",
          "bom-ref": "pkg:npm/%40aidbox/fhir-clj",
          "group": "@aidbox",
          "name": "fhir-clj",
          "version": "",
          "purl": "pkg:npm/%40aidbox/fhir-clj"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40gar/promise-retry@1.0.3?package-id=ae02c180b50d9b8b",
      "name": "@gar/promise-retry",
      "version": "1.0.3",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@gar\\/promise-retry:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40gar/promise-retry@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/wraithgar/node-promise-retry.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise-retry:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise_retry:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise_retry:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wraithgar:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wraithgar:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@gar/promise-retry/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=81c2e50358d62b53",
      "author": "Isaac Z. Schlueter",
      "name": "@isaacs/fs-minipass",
      "version": "4.0.1",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=b92bb8b1ccf39991",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "@isaacs/string-locale-compare",
      "version": "1.1.0",
      "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/string-locale-compare",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/agent@4.0.0?package-id=a4efc6269462aa0d",
      "author": "GitHub Inc.",
      "name": "@npmcli/agent",
      "version": "4.0.0",
      "description": "the http/https agent used by the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/agent@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/agent.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/agent#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/agent/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/arborist@9.4.2?package-id=6992010b5796f1db",
      "author": "GitHub Inc.",
      "name": "@npmcli/arborist",
      "version": "9.4.2",
      "description": "Manage node_modules trees",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:arborist:9.4.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/%40npmcli/arborist@9.4.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/config@10.8.1?package-id=eb2607f2cc3be904",
      "author": "GitHub Inc.",
      "name": "@npmcli/config",
      "version": "10.8.1",
      "description": "Configuration management for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:10.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/config@10.8.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/config/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/fs@5.0.0?package-id=3b550a30852e4783",
      "author": "GitHub Inc.",
      "name": "@npmcli/fs",
      "version": "5.0.0",
      "description": "filesystem utilities for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/fs@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/fs/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/git@7.0.2?package-id=7201a1fa238a159b",
      "author": "GitHub Inc.",
      "name": "@npmcli/git",
      "version": "7.0.2",
      "description": "a util for spawning git from npm CLI contexts",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/git@7.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/git.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/git/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@4.0.0?package-id=b7b15879406e624c",
      "author": "GitHub Inc.",
      "name": "@npmcli/installed-package-contents",
      "version": "4.0.0",
      "description": "Get the list of files installed in a package in node_modules, including bundled dependencies",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/installed-package-contents@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/installed-package-contents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed_package_contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed-package-contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed_package_contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed-package-contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed_package_contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed-package-contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed_package_contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed-package-contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed_package_contents:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/map-workspaces@5.0.3?package-id=d50f1e31610fd790",
      "author": "GitHub Inc.",
      "name": "@npmcli/map-workspaces",
      "version": "5.0.3",
      "description": "Retrieves a name:pathname Map for a given workspaces config",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/map-workspaces@5.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/map-workspaces.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@9.0.3?package-id=21f11a7a63cbd8bd",
      "author": "GitHub Inc.",
      "name": "@npmcli/metavuln-calculator",
      "version": "9.0.3",
      "description": "Calculate meta-vulnerabilities from package security advisories",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:9.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/metavuln-calculator@9.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/metavuln-calculator.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln_calculator:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln-calculator:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln_calculator:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln-calculator:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln_calculator:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/name-from-folder@4.0.0?package-id=b0c374b90a94f297",
      "author": "GitHub Inc.",
      "name": "@npmcli/name-from-folder",
      "version": "4.0.0",
      "description": "Get the package name from a folder path",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/name-from-folder@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/name-from-folder.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/node-gyp@5.0.0?package-id=c9aee3a61fc99176",
      "author": "GitHub Inc.",
      "name": "@npmcli/node-gyp",
      "version": "5.0.0",
      "description": "Tools for dealing with node-gyp packages",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/node-gyp@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node_gyp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node-gyp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node_gyp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node-gyp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node_gyp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/package-json@7.0.5?package-id=57165c924c2bf0aa",
      "author": "GitHub Inc.",
      "name": "@npmcli/package-json",
      "version": "7.0.5",
      "description": "Programmatic API to update package.json",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/package-json@7.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/package-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/promise-spawn@9.0.1?package-id=a24aedb302bcde16",
      "author": "GitHub Inc.",
      "name": "@npmcli/promise-spawn",
      "version": "9.0.1",
      "description": "spawn processes the way the npm cli likes to do",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/promise-spawn@9.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/promise-spawn.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/query@5.0.0?package-id=85940051a67a1195",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "@npmcli/query",
      "version": "5.0.0",
      "description": "npm query parser and tools",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/query@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/query.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/query/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/redact@4.0.0?package-id=0b0b32b141add11f",
      "author": "GitHub Inc.",
      "name": "@npmcli/redact",
      "version": "4.0.0",
      "description": "Redact sensitive npm information from output",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/redact:\\@npmcli\\/redact:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/redact@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/redact.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/redact/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40npmcli/run-script@10.0.4?package-id=ed61ae60771ebb44",
      "author": "GitHub Inc.",
      "name": "@npmcli/run-script",
      "version": "10.0.4",
      "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:10.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/run-script@10.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/run-script.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run_script:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run-script:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run_script:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run-script:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run_script:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/bundle@4.0.0?package-id=7e2d28adb7c9cfff",
      "author": "bdehamer@github.com",
      "name": "@sigstore/bundle",
      "version": "4.0.0",
      "description": "Sigstore bundle type",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/bundle:\\@sigstore\\/bundle:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/bundle@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/bundle:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/core@3.2.0?package-id=30374c1088492946",
      "author": "bdehamer@github.com",
      "name": "@sigstore/core",
      "version": "3.2.0",
      "description": "Base library for Sigstore",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/core:\\@sigstore\\/core:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/core@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/core#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/core:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/core/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/protobuf-specs@0.5.0?package-id=124b00880b3329fe",
      "author": "bdehamer@github.com",
      "name": "@sigstore/protobuf-specs",
      "version": "0.5.0",
      "description": "code-signing for npm packages",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/protobuf-specs:\\@sigstore\\/protobuf-specs:0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/protobuf-specs@0.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/protobuf-specs.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/protobuf-specs#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf-specs:\\@sigstore\\/protobuf_specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf_specs:\\@sigstore\\/protobuf-specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf_specs:\\@sigstore\\/protobuf_specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf:\\@sigstore\\/protobuf-specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf:\\@sigstore\\/protobuf_specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/protobuf-specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/protobuf_specs:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/sign@4.1.1?package-id=a28c92a5a50bc044",
      "author": "bdehamer@github.com",
      "name": "@sigstore/sign",
      "version": "4.1.1",
      "description": "Sigstore signing library",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/sign:\\@sigstore\\/sign:4.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/sign@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/sign#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/sign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/sign/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/tuf@4.0.2?package-id=82563be2d8e6c017",
      "author": "bdehamer@github.com",
      "name": "@sigstore/tuf",
      "version": "4.0.2",
      "description": "Client for the Sigstore TUF repository",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/tuf:\\@sigstore\\/tuf:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/tuf@4.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/tuf:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40sigstore/verify@3.1.0?package-id=bc8c8a2ff5de7ca3",
      "author": "bdehamer@github.com",
      "name": "@sigstore/verify",
      "version": "3.1.0",
      "description": "Verification of Sigstore signatures",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/verify:\\@sigstore\\/verify:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/verify@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/verify#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/verify:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@sigstore/verify/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40tufjs/canonical-json@2.0.0?package-id=e905b93f8c592a54",
      "author": "bdehamer@github.com",
      "name": "@tufjs/canonical-json",
      "version": "2.0.0",
      "description": "OLPC JSON canonicalization",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tufjs\\/canonical-json:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tufjs/canonical-json@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical-json:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical_json:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical_json:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/%40tufjs/models@4.1.0?package-id=a68bfc3e2b6d6b3f",
      "author": "bdehamer@github.com",
      "name": "@tufjs/models",
      "version": "4.1.0",
      "description": "TUF metadata models",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:theupdateframework:\\@tufjs\\/models:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tufjs/models@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/models:\\@tufjs\\/models:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/@tufjs/models/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@4.0.0?package-id=eb108005369708ef",
      "author": "GitHub Inc.",
      "name": "abbrev",
      "version": "4.0.0",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:abbrev:abbrev:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/abbrev@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/abbrev-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/abbrev/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=0e9ab47da930c04b&upstream=ada",
      "publisher": "Jakub Jirutka <jakub@jirutka.cz>",
      "name": "ada-libs",
      "version": "3.3.0-r0",
      "description": "WHATWG-compliant and fast URL parser written in modern C++ (libraries)",
      "licenses": [
        {
          "expression": "( Apache-2.0 OR MIT ) AND MPL-2.0"
        }
      ],
      "cpe": "cpe:2.3:a:ada-libs:ada-libs:3.3.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64&distro=alpine-3.23.4&upstream=ada",
      "externalReferences": [
        {
          "url": "https://ada-url.github.io/ada",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ada-libs:ada_libs:3.3.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ada_libs:ada-libs:3.3.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ada_libs:ada_libs:3.3.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ada:ada-libs:3.3.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ada:ada_libs:3.3.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "d279ef8c31170898285e2a989f62909992bff448"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "700480"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "ada"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libada.so.3=3.3.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1c3Mc5F5eryVwPEP5D0NDyA+GDt0="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libstdc++.so.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "234020"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=22363fdb6d099442",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "agent-base",
      "version": "7.1.4",
      "description": "Turn a function into an `http.Agent` instance",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/agent-base/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=307598d85e573e0f",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "alpine-baselayout",
      "version": "3.7.2-r0",
      "description": "Alpine base dir structure and init scripts",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.7.2-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/alpine-baselayout@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/master/main/alpine-baselayout",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine-baselayout:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine_baselayout:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "15b3b78187b3808104f98f765e9632e0b09281a7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "6552"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "alpine-baselayout"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1VFqm8pEgmviZMrdh2eQiwneFlsw="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "alpine-baselayout-data=3.7.2-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:size",
          "value": "8279"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=1c56775a8069ec5f&upstream=alpine-baselayout",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "alpine-baselayout-data",
      "version": "3.7.2-r0",
      "description": "Alpine base dir structure and init scripts",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.7.2-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4&upstream=alpine-baselayout",
      "externalReferences": [
        {
          "url": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/master/main/alpine-baselayout",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine-baselayout-data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine_baselayout_data:3.7.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "15b3b78187b3808104f98f765e9632e0b09281a7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "19034"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "alpine-baselayout"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1hYFmMtvOB7p+nnpin6We3b0Wh/s="
        },
        {
          "name": "syft:metadata:size",
          "value": "10790"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=afad29d3ea43d3cb",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "alpine-keys",
      "version": "2.6-r0",
      "description": "Public keys for Alpine Linux packages",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://alpinelinux.org",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-keys:alpine_keys:2.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_keys:alpine-keys:2.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_keys:alpine_keys:2.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine-keys:2.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine_keys:2.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "b9f23becced4d7b3ccc0fa0f28530243ccd314a0"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "12961"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "alpine-keys"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1XEWoIc1rhNVDu9f/EqfeGFXFzRM="
        },
        {
          "name": "syft:metadata:size",
          "value": "12199"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/alpine-release@3.23.4-r0?arch=x86_64&distro=alpine-3.23.4&package-id=54eb61870e16b46d&upstream=alpine-base",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "alpine-release",
      "version": "3.23.4-r0",
      "description": "Alpine release data",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:alpine-release:alpine-release:3.23.4-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/alpine-release@3.23.4-r0?arch=x86_64&distro=alpine-3.23.4&upstream=alpine-base",
      "externalReferences": [
        {
          "url": "https://alpinelinux.org",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine-release:alpine_release:3.23.4-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_release:alpine-release:3.23.4-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine_release:alpine_release:3.23.4-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine-release:3.23.4-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alpine:alpine_release:3.23.4-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "80547603fef905175bab0134ca7bbee7150d1417"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "343"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "alpine-base"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1f/C1jlIhG7MahOKv28v/BiDfVaE="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "alpine-keys"
        },
        {
          "name": "syft:metadata:size",
          "value": "2089"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=c0f1d1dce995c0da",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "apk-tools",
      "version": "3.0.6-r0",
      "description": "Alpine Package Keeper - package manager for alpine",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:apk-tools:apk-tools:3.0.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://gitlab.alpinelinux.org/alpine/apk-tools",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apk-tools:apk_tools:3.0.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apk_tools:apk-tools:3.0.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apk_tools:apk_tools:3.0.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apk:apk-tools:3.0.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apk:apk_tools:3.0.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "3812c9da974bef8b28f995490ca8233f1472ccc4"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "115096"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "apk-tools"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "apk-tools3=3.0.6-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:apk=3.0.6-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1hvOz75TRyyE6TtEYezSmu59ZMDM="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "musl>=1.2.3_git20230424"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "libcrypto3>=3.5"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "libapk=3.0.6-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "ca-certificates-bundle"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libapk.so.3.0.0"
        },
        {
          "name": "syft:metadata:pullDependencies:5",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:6",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "54642"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/aproba@2.1.0?package-id=c56ecd8b4952c937",
      "author": "Rebecca Turner <me@re-becca.org>",
      "name": "aproba",
      "version": "2.1.0",
      "description": "A ridiculously light-weight argument validator (now browser friendly)",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:aproba:aproba:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/aproba@2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/iarna/aproba",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/aproba",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:aproba:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/aproba/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0?package-id=a81238f43f9b3c6c",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "archy",
      "version": "1.0.0",
      "description": "render nested hierarchies `npm ls` style with unicode pipes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "url": "http://github.com/substack/node-archy.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archy:archy:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/archy/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@4.0.4?package-id=fbd8f18671b68e0b",
      "name": "balanced-match",
      "version": "4.0.4",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:balanced-match:balanced-match:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/balanced-match@4.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced-match:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/balanced-match/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/bin-links@6.0.0?package-id=2654b385d7ce1a65",
      "author": "GitHub Inc.",
      "name": "bin-links",
      "version": "6.0.0",
      "description": "JavaScript package binary linker",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bin-links:bin-links:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bin-links@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/bin-links.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin-links:bin_links:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin_links:bin-links:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin_links:bin_links:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin:bin-links:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin:bin_links:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/bin-links/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@3.1.0?package-id=294d7243254e852c",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "binary-extensions",
      "version": "3.1.0",
      "description": "List of binary file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/binary-extensions@3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary-extensions:binary_extensions:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary_extensions:binary-extensions:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary_extensions:binary_extensions:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary:binary-extensions:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary:binary_extensions:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/binary-extensions/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@5.0.4?package-id=dc90a7f5677279c3",
      "name": "brace-expansion",
      "version": "5.0.4",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:5.0.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@5.0.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=984a9e5869a7c52d&upstream=brotli",
      "publisher": "prspkt <prspkt@protonmail.com>",
      "name": "brotli-libs",
      "version": "1.2.0-r0",
      "description": "Generic lossless compressor (libraries)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.2.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=alpine-3.23.4&upstream=brotli",
      "externalReferences": [
        {
          "url": "https://github.com/google/brotli",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brotli-libs:brotli_libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brotli_libs:brotli-libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brotli_libs:brotli_libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brotli:brotli-libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brotli:brotli_libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:brotli-libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:brotli_libs:1.2.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "e1a74d1bc0c4e0308990de2e9ec9d82529fcac8f"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "980488"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "brotli"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libbrotlicommon.so.1=1.2.0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "so:libbrotlidec.so.1=1.2.0"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "so:libbrotlienc.so.1=1.2.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1CBRpRgLzXSdB6Rb9y0yaHg7FC0I="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "429601"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=5b8a9495e4efe754",
      "publisher": "Sören Tempel <soeren+alpine@soeren-tempel.net>",
      "name": "busybox",
      "version": "1.37.0-r30",
      "description": "Size optimized toolbox of many common UNIX utilities",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:busybox:busybox:1.37.0-r30:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://busybox.net/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "1e823a60eb85606954b3a5af5f8e5bbd1ea680cf"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "813480"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "busybox"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:busybox=1.37.0-r30"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q18TR4AbuWsapA0X+CI3w/T/AqRyU="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "504726"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox",
      "publisher": "Sören Tempel <soeren+alpine@soeren-tempel.net>",
      "name": "busybox-binsh",
      "version": "1.37.0-r30",
      "description": "busybox ash /bin/sh",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&upstream=busybox",
      "externalReferences": [
        {
          "url": "https://busybox.net/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:busybox:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:busybox:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "1e823a60eb85606954b3a5af5f8e5bbd1ea680cf"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "busybox"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:sh=1.37.0-r30"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1GI0tARCvpY6KPj5f1CSy2Zbfegk="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "busybox=1.37.0-r30"
        },
        {
          "name": "syft:metadata:size",
          "value": "1565"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9616672525c3d5b0",
      "publisher": "Carlo Landmeter <clandmeter@alpinelinux.org>",
      "name": "c-ares",
      "version": "1.34.6-r0",
      "description": "Asynchronous DNS/names resolver library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:c-ares:c-ares:1.34.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://c-ares.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c-ares:c_ares:1.34.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c_ares:c-ares:1.34.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c_ares:c_ares:1.34.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c:c-ares:1.34.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c:c_ares:1.34.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "121b2aa90d4cdc8c976c36291af9ad83d16c20a9"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "239320"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "c-ares"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libcares.so.2=2.19.5"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q147s/9Honf/lAm4xLuCUJnP4ry+I="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "109055"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/ca-certificates@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a5d9eec75c31a8ba",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "ca-certificates",
      "version": "20260413-r0",
      "description": "Common CA certificates PEM files from Mozilla",
      "licenses": [
        {
          "expression": "MPL-2.0 AND MIT"
        }
      ],
      "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20260413-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/ca-certificates@20260413-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates:ca_certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca-certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca_certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:ca-certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:ca_certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca-certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca_certificates:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "45fc64457600f914b3c60bc4c02ed99c1b55cadb"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "252263"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "ca-certificates"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:c_rehash=20260413-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:update-ca-certificates=20260413-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1ryXg8KBBKxQZQpCe0ZkUTMRvW7w="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "153711"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=97d3ed0e5d72a8bd&upstream=ca-certificates",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "ca-certificates-bundle",
      "version": "20260413-r0",
      "description": "Pre generated bundle of Mozilla certificates",
      "licenses": [
        {
          "expression": "MPL-2.0 AND MIT"
        }
      ],
      "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/ca-certificates-bundle@20260413-r0?arch=x86_64&distro=alpine-3.23.4&upstream=ca-certificates",
      "externalReferences": [
        {
          "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca-certificates-bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca_certificates_bundle:20260413-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "45fc64457600f914b3c60bc4c02ed99c1b55cadb"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "217769"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "ca-certificates"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "ca-certificates-cacert=20260413-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1RMkIJ+EBFctq/sUQgcsmeF3I9Bg="
        },
        {
          "name": "syft:metadata:size",
          "value": "128678"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/cacache@20.0.4?package-id=7266fb3b94b83882",
      "author": "GitHub Inc.",
      "name": "cacache",
      "version": "20.0.4",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cacache:cacache:20.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cacache@20.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cacache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/cacache/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/chalk@5.6.2?package-id=2d13fa9529d4fc9d",
      "name": "chalk",
      "version": "5.6.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chalk:chalk:5.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chalk@5.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/chalk/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/chownr@3.0.0?package-id=e88e688fc25a5e51",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "chownr",
      "version": "3.0.0",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chownr@3.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/chownr/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@4.4.0?package-id=dd0b42fe487da3da",
      "author": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son), Sibiraj (https://github.com/sibiraj-s)",
      "name": "ci-info",
      "version": "4.4.0",
      "description": "Get details about the current Continuous Integration environment",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ci-info:ci-info:4.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ci-info@4.4.0",
      "externalReferences": [
        {
          "url": "https://github.com/watson/ci-info",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci-info:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci_info:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci_info:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:watson:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:watson:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ci-info/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/cidr-regex@5.0.3?package-id=6990c93fabcc49af",
      "author": "silverwind <me@silverwind.io>, Felipe Apostol <flipjs.io@gmail.com> (http://flipjs.io/)",
      "name": "cidr-regex",
      "version": "5.0.3",
      "description": "Regular expression for matching IP addresses in CIDR notation",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cidr-regex@5.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr-regex:cidr_regex:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr_regex:cidr-regex:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr_regex:cidr_regex:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr:cidr-regex:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr:cidr_regex:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/cidr-regex/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/cmd-shim@8.0.0?package-id=bc18533547232b9d",
      "author": "GitHub Inc.",
      "name": "cmd-shim",
      "version": "8.0.0",
      "description": "Used in npm for command line application support",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cmd-shim@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cmd-shim.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd-shim:cmd_shim:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd_shim:cmd-shim:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd_shim:cmd_shim:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd-shim:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd_shim:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/cmd-shim/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/common-ancestor-path@2.0.0?package-id=222441b3970b26b2",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "common-ancestor-path",
      "version": "2.0.0",
      "description": "Find the common ancestor of 2 or more paths on Windows or Unix",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/common-ancestor-path@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor-path:common_ancestor_path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common-ancestor-path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common_ancestor_path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common-ancestor-path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common_ancestor_path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common-ancestor-path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common_ancestor_path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-ancestor-path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_ancestor_path:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/common-ancestor-path/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=249e2bcc0697cff2",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "cssesc",
      "version": "3.0.0",
      "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/cssesc.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/cssesc",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/cssesc/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/curl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=4d1c09eee735606c",
      "publisher": "Achill Gilgenast <achill@achill.org>",
      "name": "curl",
      "version": "8.19.0-r0",
      "description": "URL retrival utility and library",
      "licenses": [
        {
          "license": {
            "id": "curl"
          }
        }
      ],
      "cpe": "cpe:2.3:a:curl:curl:8.19.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/curl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://curl.se/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:haxx:curl:8.19.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "975ba2d125291cfbe7b6eafbafaa0ca8e33b133c"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "280125"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "curl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "wcurl=8.19.0-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:curl=8.19.0-r0"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "cmd:wcurl=8.19.0-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1gS8Qg8/BDGWwWwW7St+jrLXPYFg="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libcurl=8.19.0-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcurl.so.4"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "173799"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3?package-id=a1e172ec2809fa05",
      "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/debug/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/diff@8.0.3?package-id=7a041842f68516b1",
      "author": "Kevin Decker <kpdecker@gmail.com> (http://incaseofstairs.com), Mark Amery <markrobertamery+jsdiff@gmail.com>",
      "name": "diff",
      "version": "8.0.3",
      "description": "A JavaScript text diff implementation.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:kpdecker:jsdiff:8.0.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/diff@8.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/kpdecker/jsdiff.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/diff/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=446cd1dd24496ab4",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "env-paths",
      "version": "2.2.1",
      "description": "Get paths for storing things like data, config, cache, etc",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/env-paths/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=01d5bb5a1679da95",
      "author": "Sami Sayegh",
      "name": "exponential-backoff",
      "version": "3.1.3",
      "description": "A utility that allows retrying a function with an exponential delay between attempts.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/exponential-backoff@3.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/coveooss/exponential-backoff.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/coveooss/exponential-backoff#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/exponential-backoff/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fastest-levenshtein@1.0.16?package-id=b215551a9f0158a9",
      "author": "Kasper U. Weihe",
      "name": "fastest-levenshtein",
      "version": "1.0.16",
      "description": "Fastest Levenshtein distance implementation in JS.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fastest-levenshtein@1.0.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ka-weihe/fastest-levenshtein#README",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest-levenshtein:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest_levenshtein:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest_levenshtein:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ka-weihe:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ka-weihe:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fdir@6.5.0?package-id=a41345bd7631a4dc",
      "author": "thecodrr <thecodrr@protonmail.com>",
      "name": "fdir",
      "version": "6.5.0",
      "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fdir@6.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/thecodrr/fdir.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thecodrr/fdir#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tinyglobby/node_modules/fdir/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=c802d9a8beb54dcb",
      "author": "GitHub Inc.",
      "name": "fs-minipass",
      "version": "3.0.3",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs-minipass@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/fs-minipass#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/fs-minipass/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/gettext-envsubst@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=ba6b58fefc46fc30&upstream=gettext",
      "publisher": "Carlo Landmeter <clandmeter@alpinelinux.org>",
      "name": "gettext-envsubst",
      "version": "0.24.1-r1",
      "description": "GNU gettext envsubst binary",
      "licenses": [
        {
          "expression": "GPL-3.0-or-later AND LGPL-2.1-or-later AND MIT"
        }
      ],
      "cpe": "cpe:2.3:a:gettext-envsubst:gettext-envsubst:0.24.1-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/gettext-envsubst@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&upstream=gettext",
      "externalReferences": [
        {
          "url": "https://www.gnu.org/software/gettext/gettext.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gettext-envsubst:gettext_envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gettext_envsubst:gettext-envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gettext_envsubst:gettext_envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gettext:gettext-envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gettext:gettext_envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:gettext-envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:gettext_envsubst:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "c82bd9e35f215c0e39ee43d1aa8c55c230bfbeec"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "47008"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "gettext"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "envsubst"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:envsubst=0.24.1-r1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1dZP32Cp8lD8BFKX3AHiMU6+4pVQ="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libintl.so.8"
        },
        {
          "name": "syft:metadata:size",
          "value": "20985"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/git@2.52.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=c9793ebf56e5aaa5",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "git",
      "version": "2.52.0-r0",
      "description": "Distributed version control system",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:git-scm:git:2.52.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/git@2.52.0-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.git-scm.com/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git_scm:git:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git:git:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "fd43f6a336353b49fe5e9e3a3e8496ad05b53902"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "6837094"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "git"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:git-receive-pack=2.52.0-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:git-shell=2.52.0-r0"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "cmd:git-upload-archive=2.52.0-r0"
        },
        {
          "name": "syft:metadata:provides:3",
          "value": "cmd:git-upload-pack=2.52.0-r0"
        },
        {
          "name": "syft:metadata:provides:4",
          "value": "cmd:git=2.52.0-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1vQso+RiU3HWICiJGhEWi0IS+sAk="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libcurl.so.4"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libexpat.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libpcre2-8.so.0"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "3446522"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/git-init-template@2.52.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=d7acbfe9ff2f5297&upstream=git",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "git-init-template",
      "version": "2.52.0-r0",
      "description": "Git init template directory",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:git-init-template:git-init-template:2.52.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/git-init-template@2.52.0-r0?arch=x86_64&distro=alpine-3.23.4&upstream=git",
      "externalReferences": [
        {
          "url": "https://www.git-scm.com/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git-init-template:git_init_template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git_init_template:git-init-template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git_init_template:git_init_template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git-init:git-init-template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git-init:git_init_template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git_init:git-init-template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git_init:git_init_template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git:git-init-template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:git:git_init_template:2.52.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "fd43f6a336353b49fe5e9e3a3e8496ad05b53902"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "21414"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "git"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1/xWmfR9JSGGKECIJGuehvzmfNmU="
        },
        {
          "name": "syft:metadata:size",
          "value": "10363"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/glob@13.0.6?package-id=a6a31e2eaab25327",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
      "name": "glob",
      "version": "13.0.6",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:13.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@13.0.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/glob/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=304c6ab868b2d650",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-graceful-fs",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/graceful-fs/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@9.0.2?package-id=cd482fafdb4e4134",
      "author": "GitHub Inc.",
      "name": "hosted-git-info",
      "version": "9.0.2",
      "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:9.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hosted-git-info@9.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/hosted-git-info.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/hosted-git-info",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git-info:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted-git-info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted-git-info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted-git-info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted-git-info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted-git-info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted_git_info:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/hosted-git-info/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=c87764051de550d7",
      "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
      "name": "http-cache-semantics",
      "version": "4.2.0",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/http-cache-semantics@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kornelski/http-cache-semantics.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/http-cache-semantics/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=0ede80afd3a68d52",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "http-proxy-agent",
      "version": "7.0.2",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-proxy-agent@7.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/http-proxy-agent/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=9eae5591fc5f2e08",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/https-proxy-agent/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.7.2?package-id=0d6c35b25a3ead43",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.7.2",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.7.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.7.2",
      "externalReferences": [
        {
          "url": "https://github.com/pillarjs/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pillarjs/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pillarjs:iconv-lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pillarjs:iconv_lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/icu-data-en@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=fe9f6db80ee9337b&upstream=icu",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "icu-data-en",
      "version": "76.1-r1",
      "description": "Stripped down ICU data with only en_US/GB locale and no legacy charset converters",
      "licenses": [
        {
          "license": {
            "id": "ICU"
          }
        }
      ],
      "cpe": "cpe:2.3:a:icu-data-en:icu-data-en:76.1-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/icu-data-en@76.1-r1?arch=x86_64&distro=alpine-3.23.4&upstream=icu",
      "externalReferences": [
        {
          "url": "https://icu.unicode.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-data-en:icu_data_en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_data_en:icu-data-en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_data_en:icu_data_en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-data:icu-data-en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-data:icu_data_en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_data:icu-data-en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_data:icu_data_en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu-data-en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu_data_en:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "f69cb964d00aba2d395adce1733a78f1318f3da8"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "3008672"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "icu"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "icu-data=76.1-r1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1B3+6pjcFLd2NYgKDHcGaU7X/9w4="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:size",
          "value": "1016029"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/icu-libs@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=f7505d582acd3e36&upstream=icu",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "icu-libs",
      "version": "76.1-r1",
      "description": "International Components for Unicode library (libraries)",
      "licenses": [
        {
          "license": {
            "id": "ICU"
          }
        }
      ],
      "cpe": "cpe:2.3:a:icu-libs:icu-libs:76.1-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/icu-libs@76.1-r1?arch=x86_64&distro=alpine-3.23.4&upstream=icu",
      "externalReferences": [
        {
          "url": "https://icu.unicode.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-libs:icu_libs:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_libs:icu-libs:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_libs:icu_libs:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu-libs:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu_libs:76.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "f69cb964d00aba2d395adce1733a78f1318f3da8"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "4762632"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "icu"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libicudata.so.76=76.1"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "so:libicui18n.so.76=76.1"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "so:libicuio.so.76=76.1"
        },
        {
          "name": "syft:metadata:provides:3",
          "value": "so:libicuuc.so.76=76.1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1Wy55i6IPgx1k5UUmQxxS2Y4+35A="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "icu-data=76.1-r1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libstdc++.so.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "1920286"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ignore-walk@8.0.0?package-id=ca3bb5194654741c",
      "author": "GitHub Inc.",
      "name": "ignore-walk",
      "version": "8.0.0",
      "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ignore-walk@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ignore-walk.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore-walk:ignore_walk:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore_walk:ignore-walk:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore_walk:ignore_walk:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore:ignore-walk:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore:ignore_walk:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ignore-walk/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ini@6.0.0?package-id=cf05b80208724d4e",
      "author": "GitHub Inc.",
      "name": "ini",
      "version": "6.0.0",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ini_project:ini:6.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ini@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ini.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ini/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/init-package-json@8.2.5?package-id=550b67a67a40779a",
      "author": "GitHub Inc.",
      "name": "init-package-json",
      "version": "8.2.5",
      "description": "A node module to get your node module started",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:init-package-json:init-package-json:8.2.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/init-package-json@8.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/init-package-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package-json:init_package_json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package_json:init-package-json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package_json:init_package_json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package:init-package-json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package:init_package_json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package:init-package-json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package:init_package_json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init-package-json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init_package_json:8.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/init-package-json/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ip-address@10.1.0?package-id=b958288bb0c2bb20",
      "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
      "name": "ip-address",
      "version": "10.1.0",
      "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ip-address@10.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/beaugunderson/ip-address.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beaugunderson:ip_address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip-address:ip-address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip-address:ip_address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip_address:ip-address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip_address:ip_address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip:ip-address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip:ip_address:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ip-address/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/is-cidr@6.0.3?package-id=24a46b753a24b1aa",
      "author": "silverwind <me@silverwind.io>, Felipe Apostol <flipjs.io@gmail.com> (http://flipjs.io/)",
      "name": "is-cidr",
      "version": "6.0.3",
      "description": "Check if a string is an IP address in CIDR notation",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-cidr:is-cidr:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-cidr@6.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-cidr:is_cidr:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_cidr:is-cidr:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_cidr:is_cidr:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-cidr:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_cidr:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/is-cidr/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/isexe@4.0.0?package-id=5829f60468269a76",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "4.0.0",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@4.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/isexe",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jrt-fs/jrt-fs@25.0.3?package-id=39d599c8f7f91f48",
      "name": "jrt-fs",
      "version": "25.0.3",
      "cpe": "cpe:2.3:a:oracle-corporation:jrt-fs:25.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/jrt-fs/jrt-fs@25.0.3",
      "externalReferences": [
        {
          "url": "",
          "type": "build-meta",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fcd777ca8d8ec0d47813397f0b0c360f06403986"
            }
          ]
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt-fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bellsoft:jrt-fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bellsoft:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt-fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt-fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt-fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt_fs:25.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/jvm/jre-25.0.3-bellsoft-x86_64/lib/jrt-fs.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/usr/lib/jvm/jre-25.0.3-bellsoft-x86_64/lib/jrt-fs.jar"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-even-better-errors@5.0.0?package-id=2092a513b2357ffc",
      "author": "GitHub Inc.",
      "name": "json-parse-even-better-errors",
      "version": "5.0.0",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-parse-even-better-errors@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/json-parse-even-better-errors.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better-errors:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=43fe2968ba825879",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "json-stringify-nice",
      "version": "1.1.4",
      "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-stringify-nice@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/json-stringify-nice",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify-nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/json-stringify-nice/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=0da876bd7e75b8a5",
      "author": "Tim Caswell <tim@creationix.com>",
      "name": "jsonparse",
      "version": "1.3.1",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "http://github.com/creationix/jsonparse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonparse:jsonparse:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/jsonparse/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/just-diff@6.0.2?package-id=9aab5b25b101626d",
      "author": "Angus Croll",
      "name": "just-diff",
      "version": "6.0.2",
      "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff:just-diff:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff@6.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/just-diff/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/just-diff-apply@5.5.0?package-id=4364551774665beb",
      "author": "Angus Croll",
      "name": "just-diff-apply",
      "version": "5.5.0",
      "description": "Apply a diff to an object. Optionally supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff-apply@5.5.0",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff-apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/just-diff-apply/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=681babf4296d6ab0&upstream=apk-tools",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libapk",
      "version": "3.0.6-r0",
      "description": "Alpine Package Keeper - package manager for alpine",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libapk:libapk:3.0.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&upstream=apk-tools",
      "externalReferences": [
        {
          "url": "https://gitlab.alpinelinux.org/alpine/apk-tools",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "3812c9da974bef8b28f995490ca8233f1472ccc4"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "277184"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "apk-tools"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "libapk2=3.0.6-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "so:libapk.so.3.0.0=3.0.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q18GTIMYxPfxfaakkJIc4NXnCfwGM="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libssl.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "133471"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libcrypto3",
      "version": "3.5.6-r0",
      "description": "Crypto library from openssl",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.5.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssl",
      "externalReferences": [
        {
          "url": "https://www.openssl.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto3:libcrypto:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto:libcrypto3:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto:libcrypto:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "c630cf83bed943e4e671f1ea54f907d299a958e7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "5213782"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libcrypto.so.3=3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1nnqGbQ0FLSkNP51iGkyJIUGIrP8="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "1976080"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libcrypto3",
      "version": "3.5.7-r0",
      "description": "Crypto library from openssl",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssl",
      "externalReferences": [
        {
          "url": "https://www.openssl.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "35c0d1f2b314f647008595f681786813760da191"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "5213782"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libcrypto.so.3=3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1IyWL5s7jKIHT4sOboUSD4wIy8fg="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "1976812"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libcurl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=cb62cf0637498cc6&upstream=curl",
      "publisher": "Achill Gilgenast <achill@achill.org>",
      "name": "libcurl",
      "version": "8.19.0-r0",
      "description": "The multiprotocol file transfer library",
      "licenses": [
        {
          "license": {
            "id": "curl"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcurl:libcurl:8.19.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libcurl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&upstream=curl",
      "externalReferences": [
        {
          "url": "https://curl.se/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "975ba2d125291cfbe7b6eafbafaa0ca8e33b133c"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "714155"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "curl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libcurl.so.4=4.8.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1yDNYa25dzUoQ2nzzVLAdng7hDag="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "ca-certificates-bundle"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libbrotlidec.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:10",
          "value": "so:libzstd.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libcares.so.2"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:5",
          "value": "so:libidn2.so.0"
        },
        {
          "name": "syft:metadata:pullDependencies:6",
          "value": "so:libnghttp2.so.14"
        },
        {
          "name": "syft:metadata:pullDependencies:7",
          "value": "so:libpsl.so.5"
        },
        {
          "name": "syft:metadata:pullDependencies:8",
          "value": "so:libssl.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:9",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "341777"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libedit@20251016.3.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=6e8818b9df6bb5c8",
      "publisher": "Celeste <cielesti@protonmail.com>",
      "name": "libedit",
      "version": "20251016.3.1-r0",
      "description": "BSD line editing library",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libedit:libedit:20251016.3.1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libedit@20251016.3.1-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.thrysoee.dk/editline",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "211d61660b4b7daefe3bb0fff0e99264234c63fe"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "178016"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "libedit"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libedit.so.0=0.0.76"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1Rj9pM1oyI7HOaFbOO+9cA/7nIb8="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libncursesw.so.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "76561"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libexpat@2.7.5-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9dda660b5cb543b5&upstream=expat",
      "publisher": "Carlo Landmeter <clandmeter@alpinelinux.org>",
      "name": "libexpat",
      "version": "2.7.5-r0",
      "description": "XML Parser library written in C (libraries)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libexpat:libexpat:2.7.5-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libexpat@2.7.5-r0?arch=x86_64&distro=alpine-3.23.4&upstream=expat",
      "externalReferences": [
        {
          "url": "https://libexpat.github.io/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "97a106c89c281978af56aab7a2521c3853967ad0"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "136896"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "expat"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libexpat.so.1=1.11.3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1V2DVPd18yop0LGcuTgCkdXGOrKo="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "60117"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
      "publisher": "Ariadne Conill <ariadne@dereferenced.org>",
      "name": "libgcc",
      "version": "15.2.0-r2",
      "description": "GNU C compiler runtime libraries",
      "licenses": [
        {
          "expression": "GPL-2.0-or-later AND LGPL-2.1-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:libgcc:libgcc:15.2.0-r2:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&upstream=gcc",
      "externalReferences": [
        {
          "url": "https://gcc.gnu.org",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "7fa6e7fd3465c5ff89cc33a56d20bf4d59105aaf"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "173920"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "gcc"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libgcc_s.so.1=1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1V/zL6e6/I/LE847iok+LC91Qj/c="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "80358"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7b863e6ddaa3908e",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libidn2",
      "version": "2.3.8-r0",
      "description": "Encode/Decode library for internationalized domain names",
      "licenses": [
        {
          "expression": "GPL-2.0-or-later OR LGPL-3.0-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:libidn2:libidn2:2.3.8-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.gnu.org/software/libidn#libidn2",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2:libidn:2.3.8-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn:libidn2:2.3.8-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn:libidn:2.3.8-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:libidn2:2.3.8-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:libidn:2.3.8-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "8240e09aa2fdd8f9979b2016be082273965aff0c"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "198632"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "libidn2"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libidn2.so.0=0.4.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1uMW/o2XaXDYKASMNtNceZa+Urz0="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libunistring.so.5"
        },
        {
          "name": "syft:metadata:size",
          "value": "104625"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libintl@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=d50b2f33e5f98df2&upstream=gettext",
      "publisher": "Carlo Landmeter <clandmeter@alpinelinux.org>",
      "name": "libintl",
      "version": "0.24.1-r1",
      "description": "GNU gettext runtime library",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libintl:libintl:0.24.1-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libintl@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&upstream=gettext",
      "externalReferences": [
        {
          "url": "https://www.gnu.org/software/gettext/gettext.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:libintl:0.24.1-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "c82bd9e35f215c0e39ee43d1aa8c55c230bfbeec"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "136912"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "gettext"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libintl.so.8=8.4.3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1AiIyS7Tf016KPsghyG61r71Do68="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "39495"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libncursesw@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a03eb9a8494c5da1&upstream=ncurses",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libncursesw",
      "version": "6.5_p20251123-r0",
      "description": "Console display library (libncursesw)",
      "licenses": [
        {
          "license": {
            "id": "X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libncursesw:libncursesw:6.5_p20251123-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libncursesw@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&upstream=ncurses",
      "externalReferences": [
        {
          "url": "https://invisible-island.net/ncurses/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "f7479f62dcb52ace52d99650c80de275010ec3ac"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "342888"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "ncurses"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libncursesw.so.6=6.5"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1ZJ0wQcUrgGIPtQqY9ZedJeu+FSM="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "ncurses-terminfo-base=6.5_p20251123-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "158748"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmaccess@10.0.3?package-id=97e923e336be12a9",
      "author": "GitHub Inc.",
      "name": "libnpmaccess",
      "version": "10.0.3",
      "description": "programmatic library for `npm access` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:10.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmaccess@10.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmaccess",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmaccess/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmdiff@8.1.5?package-id=6fa154edc9b63386",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmdiff",
      "version": "8.1.5",
      "description": "The registry diff",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:8.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmdiff@8.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmdiff/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmexec@10.2.5?package-id=0210e5d313aefc92",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmexec",
      "version": "10.2.5",
      "description": "npm exec (npx) programmatic API",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:10.2.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmexec@10.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmexec/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmfund@7.0.19?package-id=7b551438bf9d1359",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmfund",
      "version": "7.0.19",
      "description": "Programmatic API for npm fund",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:7.0.19:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmfund@7.0.19",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmfund/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmorg@8.0.1?package-id=e972e9255bff6420",
      "author": "GitHub Inc.",
      "name": "libnpmorg",
      "version": "8.0.1",
      "description": "Programmatic api for `npm org` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:8.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmorg@8.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmorg",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmorg/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmpack@9.1.5?package-id=dbdb73f869d90069",
      "author": "GitHub Inc., Claudia Hernández <claudia@npmjs.com>",
      "name": "libnpmpack",
      "version": "9.1.5",
      "description": "Programmatic API for the bits behind npm pack",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:9.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmpack@9.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmpack",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmpack/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmpublish@11.1.3?package-id=bbb72b31c6abe700",
      "author": "GitHub Inc., Kat Marchán <kzm@zkat.tech>, Claudia Hernández <claudia@npmjs.com>",
      "name": "libnpmpublish",
      "version": "11.1.3",
      "description": "Programmatic API for the bits behind npm publish and unpublish",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:11.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmpublish@11.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmpublish",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmpublish/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmsearch@9.0.1?package-id=fc035bd9b7654a72",
      "author": "GitHub Inc.",
      "name": "libnpmsearch",
      "version": "9.0.1",
      "description": "Programmatic API for searching in npm and compatible registries.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmsearch@9.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmsearch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmsearch/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmteam@8.0.2?package-id=11d8cdb01773b03b",
      "author": "GitHub Inc.",
      "name": "libnpmteam",
      "version": "8.0.2",
      "description": "npm Team management APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:8.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmteam@8.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmteam",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmteam/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/libnpmversion@8.0.3?package-id=afff6b984d01c5b1",
      "author": "GitHub Inc.",
      "name": "libnpmversion",
      "version": "8.0.3",
      "description": "library to do the things that 'npm version' does",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:8.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmversion@8.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/libnpmversion/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=alpine-3.23.4&package-id=c496a24c00a9a2a3",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libpsl",
      "version": "0.21.5-r3",
      "description": "C library for the Publix Suffix List",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpsl:libpsl:0.21.5-r3:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://rockdaboot.github.io/libpsl",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "6bd45b53fb316dc01bda59f5feaf1e127eb64f22"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "75536"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "libpsl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libpsl.so.5=5.3.5"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1tmPAD5IKk75JyCVVWqGiEuQoc5M="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libidn2.so.0"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libunistring.so.5"
        },
        {
          "name": "syft:metadata:size",
          "value": "54695"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libsodium@1.0.20-r1?arch=x86_64&distro=alpine-3.23.4&package-id=1d25f994ca3ce6b4",
      "publisher": "Stuart Cardall <developer@it-offshore.co.uk>",
      "name": "libsodium",
      "version": "1.0.20-r1",
      "description": "P(ortable|ackageable) NaCl-based crypto library",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsodium:libsodium:1.0.20-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libsodium@1.0.20-r1?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://github.com/jedisct1/libsodium",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jedisct1:libsodium:1.0.20-r1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "ff602d185a28e41fe01005405793e3fbd2804b18"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "347712"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "libsodium"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libsodium.so.26=26.2.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1MzSsKLzn7UbIWh7HwdBR8zbrkG8="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "168198"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libssl3",
      "version": "3.5.6-r0",
      "description": "SSL shared libraries",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libssl3:libssl3:3.5.6-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssl",
      "externalReferences": [
        {
          "url": "https://www.openssl.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl3:libssl:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl:libssl3:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl:libssl:3.5.6-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "c630cf83bed943e4e671f1ea54f907d299a958e7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "839544"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libssl.so.3=3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1WiYg1QdDSQO3R0cKdrR+JLIi3l4="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libcrypto3=3.5.6-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "378674"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libssl3",
      "version": "3.5.7-r0",
      "description": "SSL shared libraries",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssl",
      "externalReferences": [
        {
          "url": "https://www.openssl.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "35c0d1f2b314f647008595f681786813760da191"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "839544"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libssl.so.3=3"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1jPch6UeSNQWcleSgkxkO9t9NxZE="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libcrypto3=3.5.7-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "379265"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
      "publisher": "Ariadne Conill <ariadne@dereferenced.org>",
      "name": "libstdc++",
      "version": "15.2.0-r2",
      "description": "GNU C++ standard runtime library",
      "licenses": [
        {
          "expression": "GPL-2.0-or-later AND LGPL-2.1-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:15.2.0-r2:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&upstream=gcc",
      "externalReferences": [
        {
          "url": "https://gcc.gnu.org",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "7fa6e7fd3465c5ff89cc33a56d20bf4d59105aaf"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2804104"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "gcc"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libstdc++.so.6=6.0.34"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1Uo13QXoWcGRor4UvKFmtAPF24mY="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "961296"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libunistring@1.4.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=ecc8c9edc15da9d0",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "libunistring",
      "version": "1.4.1-r0",
      "description": "Library for manipulating Unicode strings and C strings",
      "licenses": [
        {
          "expression": "GPL-2.0-or-later OR LGPL-3.0-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:libunistring:libunistring:1.4.1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/libunistring@1.4.1-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.gnu.org/software/libunistring/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gnu:libunistring:1.4.1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "cd5407e1341869af38d836fe83f9dbc98799f43a"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1922880"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "libunistring"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libunistring.so.5=5.2.1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1blZWK95Fa+5ZcXh9PZXDToTO15c="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "743482"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@11.2.7?package-id=bac748f038b77ee6",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "11.2.7",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:11.2.7:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@11.2.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/make-fetch-happen@15.0.5?package-id=59b9d503b50ae66b",
      "author": "GitHub Inc.",
      "name": "make-fetch-happen",
      "version": "15.0.5",
      "description": "Opinionated, caching, retrying fetch client",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:15.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/make-fetch-happen@15.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/make-fetch-happen.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make-fetch-happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make_fetch_happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make-fetch-happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make_fetch_happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make-fetch-happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make_fetch_happen:15.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/make-fetch-happen/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@10.2.4?package-id=09d784ba73830e95",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "10.2.4",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:10.2.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@10.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=39093a5dc2c6168c",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-flush/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=53ecfecaf067eac1",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.3?package-id=f9d7ecd62e14936c",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@7.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=70bcec9ff3663a26",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-collect",
      "version": "2.0.1",
      "description": "A Minipass stream that collects all the data into a single chunk",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-collect@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass-collect",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-collect/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass-fetch@5.0.2?package-id=13912cbbfe40cad5",
      "author": "GitHub Inc.",
      "name": "minipass-fetch",
      "version": "5.0.2",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:5.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-fetch@5.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/minipass-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-fetch:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_fetch:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-fetch/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=26819b56e2be37ea",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-flush",
      "version": "1.0.5",
      "description": "A Minipass stream that calls a flush function before emitting 'end'",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-flush@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-flush.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-flush/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=ef0dc1a0861d1278",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "description": "create a pipeline of streams using Minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-pipeline/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minipass-sized@2.0.0?package-id=a69ad8580ff5f1f7",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-sized",
      "version": "2.0.0",
      "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-sized@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-sized.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-sized:minipass_sized:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass-sized:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass_sized:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-sized:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_sized:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-sized/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=7e35cfb102300933",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minizlib",
      "version": "3.1.0",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minizlib@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minizlib.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minizlib/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3?package-id=93a085fab31bfc64",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ms/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "musl",
      "version": "1.2.5-r23",
      "description": "the musl c library (libc) implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:musl-libc:musl:1.2.5-r23:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://musl.libc.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl_libc:musl:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl:musl:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "8aef0c37b0ad23dc4137f0e4755b97a59dc698b8"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "666216"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "musl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libc.musl-x86_64.so.1=1"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1G2xQQm08BlbpxaVnpaWWAcf0MHo="
        },
        {
          "name": "syft:metadata:size",
          "value": "414071"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/musl-utils@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=98b8f915867ab553&upstream=musl",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "musl-utils",
      "version": "1.2.5-r23",
      "description": "the musl c library (libc) implementation",
      "licenses": [
        {
          "expression": "MIT AND BSD-2-Clause AND GPL-2.0-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.5-r23:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/musl-utils@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&upstream=musl",
      "externalReferences": [
        {
          "url": "https://musl.libc.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl-utils:musl_utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl_utils:musl-utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl_utils:musl_utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl-libc:musl-utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl-libc:musl_utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl:musl-utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:musl:musl_utils:1.2.5-r23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "8aef0c37b0ad23dc4137f0e4755b97a59dc698b8"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "55421"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "musl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "libc-utils=1.2.5-r23"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:getconf=1.2.5-r23"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "cmd:getent=1.2.5-r23"
        },
        {
          "name": "syft:metadata:provides:3",
          "value": "cmd:iconv=1.2.5-r23"
        },
        {
          "name": "syft:metadata:provides:4",
          "value": "cmd:ldconfig=1.2.5-r23"
        },
        {
          "name": "syft:metadata:provides:5",
          "value": "cmd:ldd=1.2.5-r23"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1kv2+ltJfE/46PSl62lbk+5B6rOw="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "scanelf"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "13598"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@3.0.0?package-id=7f3c2d53dd2d6bc3",
      "author": "GitHub Inc.",
      "name": "mute-stream",
      "version": "3.0.0",
      "description": "Bytes go in, but they don't come out (when muted).",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mute-stream:mute-stream:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mute-stream@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/mute-stream.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute-stream:mute_stream:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute_stream:mute-stream:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute_stream:mute_stream:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute:mute-stream:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute:mute_stream:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/mute-stream/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&package-id=3774e00a611ea8fe&upstream=ncurses",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "ncurses-terminfo-base",
      "version": "6.5_p20251123-r0",
      "description": "Descriptions of common terminals",
      "licenses": [
        {
          "license": {
            "id": "X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.5_p20251123-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&upstream=ncurses",
      "externalReferences": [
        {
          "url": "https://invisible-island.net/ncurses/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-terminfo-base:ncurses_terminfo_base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_terminfo_base:ncurses-terminfo-base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_terminfo_base:ncurses_terminfo_base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-terminfo:ncurses-terminfo-base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-terminfo:ncurses_terminfo_base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_terminfo:ncurses-terminfo-base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_terminfo:ncurses_terminfo_base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-terminfo-base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_terminfo_base:6.5_p20251123-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "f7479f62dcb52ace52d99650c80de275010ec3ac"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "101351"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "ncurses"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1V70dgSTslX7v6iMUvfRbDtEGjO4="
        },
        {
          "name": "syft:metadata:size",
          "value": "21855"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=2a41b9b83661e091",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "1.0.0",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8d6f32361002c027&upstream=nghttp2",
      "publisher": "Francesco Colista <fcolista@alpinelinux.org>",
      "name": "nghttp2-libs",
      "version": "1.69.0-r0",
      "description": "HTTP/2 C client, server and proxy (libraries)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.4&upstream=nghttp2",
      "externalReferences": [
        {
          "url": "https://nghttp2.org",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp2:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nghttp:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "40d265063c14143f5ef8a35c216b9e6392d120a7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "132896"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "nghttp2"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libnghttp2.so.14=14.29.4"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1a4ZRIn3T+RVd7TDdwXF1en9bkaU="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "63226"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/node-gyp@12.2.0?package-id=647eb7f297fb579c",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
      "name": "node-gyp",
      "version": "12.2.0",
      "description": "Node.js native addon build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-gyp:node-gyp:12.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-gyp@12.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node-gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node_gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp:12.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/node-gyp/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=883749d828e3e29d",
      "publisher": "Jakub Jirutka <jakub@jirutka.cz>",
      "name": "nodejs",
      "version": "24.14.1-r0",
      "description": "JavaScript runtime built on V8 engine - LTS version",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node.js:node.js:24.14.1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://nodejs.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node.js:nodejs:24.14.1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node.js:24.14.1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:nodejs:24.14.1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "41ea51853935db176f151cebb0a74d521e264dc0"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "54218048"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "nodejs"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "nodejs-lts=24.14.1-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:node=24.14.1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1hgmelr6fyJpE2pIfSkx3iMsalAY="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "ca-certificates"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:pullDependencies:10",
          "value": "so:libicuuc.so.76"
        },
        {
          "name": "syft:metadata:pullDependencies:11",
          "value": "so:libnghttp2.so.14"
        },
        {
          "name": "syft:metadata:pullDependencies:12",
          "value": "so:libsimdjson.so.25"
        },
        {
          "name": "syft:metadata:pullDependencies:13",
          "value": "so:libsimdutf.so.27"
        },
        {
          "name": "syft:metadata:pullDependencies:14",
          "value": "so:libsqlite3.so.0"
        },
        {
          "name": "syft:metadata:pullDependencies:15",
          "value": "so:libssl.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:16",
          "value": "so:libstdc++.so.6"
        },
        {
          "name": "syft:metadata:pullDependencies:17",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:18",
          "value": "so:libzstd.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libada.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libbrotlidec.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libbrotlienc.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:5",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:6",
          "value": "so:libcares.so.2"
        },
        {
          "name": "syft:metadata:pullDependencies:7",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:8",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:9",
          "value": "so:libicui18n.so.76"
        },
        {
          "name": "syft:metadata:size",
          "value": "19280624"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/nopt@9.0.0?package-id=bbe926386a3423b4",
      "author": "GitHub Inc.",
      "name": "nopt",
      "version": "9.0.0",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nopt:nopt:9.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nopt@9.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/nopt/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm@11.12.1?package-id=bd84fead65fcba8d",
      "author": "GitHub Inc.",
      "name": "npm",
      "version": "11.12.1",
      "description": "a package manager for JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node_packaged_modules_project:node_packaged_modules:11.12.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/npm@11.12.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://docs.npmjs.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/npm@11.12.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a1562d5cd1ca42c3",
      "publisher": "Jakub Jirutka <jakub@jirutka.cz>",
      "name": "npm",
      "version": "11.12.1-r0",
      "description": "The package manager for JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm:npm:11.12.1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/npm@11.12.1-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.npmjs.com/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "c331ddc80f97bde2e3ab83edb2cd645e6836e66f"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "7871070"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "npm"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:node-gyp=11.12.1-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:npm=11.12.1-r0"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "cmd:npx=11.12.1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1bK88Xk9Rve9QhoSzjOg+JrOwtuE="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "nodejs"
        },
        {
          "name": "syft:metadata:size",
          "value": "2306248"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-audit-report@7.0.0?package-id=1568964e572b1ef9",
      "author": "GitHub Inc.",
      "name": "npm-audit-report",
      "version": "7.0.0",
      "description": "Given a response from the npm security api, render it into a variety of security reports",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-audit-report@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-audit-report.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/npm-audit-report#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit-report:npm_audit_report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit_report:npm-audit-report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit_report:npm_audit_report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit:npm-audit-report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit:npm_audit_report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit:npm-audit-report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit:npm_audit_report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-audit-report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_audit_report:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-audit-report/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-bundled@5.0.0?package-id=1c423acb00fc73ec",
      "author": "GitHub Inc.",
      "name": "npm-bundled",
      "version": "5.0.0",
      "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-bundled@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-bundled.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-bundled:npm_bundled:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_bundled:npm-bundled:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_bundled:npm_bundled:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-bundled:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_bundled:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-bundled/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-install-checks@8.0.0?package-id=a3163ba2c13de27d",
      "author": "GitHub Inc.",
      "name": "npm-install-checks",
      "version": "8.0.0",
      "description": "Check the engines and platform fields in package.json",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-install-checks@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-install-checks.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install-checks:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-install-checks/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-normalize-package-bin@5.0.0?package-id=0bb26efbd1e70231",
      "author": "GitHub Inc.",
      "name": "npm-normalize-package-bin",
      "version": "5.0.0",
      "description": "Turn any flavor of allowable package.json bin into a normalized object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-normalize-package-bin@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-normalize-package-bin.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-package-arg@13.0.2?package-id=a2eef9817b2af39f",
      "author": "GitHub Inc.",
      "name": "npm-package-arg",
      "version": "13.0.2",
      "description": "Parse the things that can be arguments to `npm install`",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:13.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-package-arg@13.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-package-arg.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/npm-package-arg",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package-arg:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-package-arg/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-packlist@10.0.4?package-id=39fb97aa6dbe892e",
      "author": "GitHub Inc.",
      "name": "npm-packlist",
      "version": "10.0.4",
      "description": "Get a list of the files to add from a folder into an npm package",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:10.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-packlist@10.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-packlist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-packlist:npm_packlist:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_packlist:npm-packlist:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_packlist:npm_packlist:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-packlist:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_packlist:10.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-packlist/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-pick-manifest@11.0.3?package-id=d0a054ec03d92f57",
      "author": "GitHub Inc.",
      "name": "npm-pick-manifest",
      "version": "11.0.3",
      "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-pick-manifest@11.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-pick-manifest.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick-manifest:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-profile@12.0.1?package-id=551222d976476ad0",
      "author": "GitHub Inc.",
      "name": "npm-profile",
      "version": "12.0.1",
      "description": "Library for updating an npmjs.com profile",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-profile:npm-profile:12.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-profile@12.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-profile.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-profile:npm_profile:12.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_profile:npm-profile:12.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_profile:npm_profile:12.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-profile:12.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_profile:12.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-profile/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-registry-fetch@19.1.1?package-id=0be0170d592d6fa9",
      "author": "GitHub Inc.",
      "name": "npm-registry-fetch",
      "version": "19.1.1",
      "description": "Fetch-based http client for use with npm registry APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:19.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-registry-fetch@19.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-registry-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry-fetch:npm_registry_fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry_fetch:npm-registry-fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry_fetch:npm_registry_fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry:npm-registry-fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry:npm_registry_fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry:npm-registry-fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry:npm_registry_fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-registry-fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_registry_fetch:19.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/npm-user-validate@4.0.0?package-id=975a786a26513745",
      "author": "GitHub Inc.",
      "name": "npm-user-validate",
      "version": "4.0.0",
      "description": "User validations for npm",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-user-validate@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-user-validate.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user-validate:npm_user_validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user_validate:npm-user-validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user_validate:npm_user_validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user:npm-user-validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user:npm_user_validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user:npm-user-validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user:npm_user_validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-user-validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_user_validate:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/npm-user-validate/package.json"
        }
      ]
    },
    {
      "type": "application",
      "bom-ref": "pkg:generic/oracle/openjdk@25.0.3%2B11-LTS?package-id=eba98006b2c98557",
      "name": "openjdk",
      "version": "25.0.3+11-LTS",
      "cpe": "cpe:2.3:a:oracle:openjdk:25.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:generic/oracle/openjdk@25.0.3%2B11-LTS",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-jvm-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "binary"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-jvm-installation"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/jvm/jre-25.0.3-bellsoft-x86_64/release"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=48e3c6aba1dc51e9",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh",
      "version": "10.2_p1-r0",
      "description": "Port of OpenBSD's free SSH release",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh:openssh:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "338056"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1cX8/h7qI0aL/K6aQ9fln1xy+To8="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "openssh-client"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "openssh-sftp-server"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "openssh-server"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "140136"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-client-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=37dc0f95b32f4e0f&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-client-common",
      "version": "10.2_p1-r0",
      "description": "OpenBSD's SSH client common files",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-client-common:openssh-client-common:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-client-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client-common:openssh_client_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client_common:openssh-client-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client_common:openssh_client_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client:openssh-client-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client:openssh_client_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh-client-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh_client_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-client-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_client_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2561474"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:findssl.sh=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:scp=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:2",
          "value": "cmd:sftp=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:3",
          "value": "cmd:ssh-add=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:4",
          "value": "cmd:ssh-agent=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:5",
          "value": "cmd:ssh-copy-id=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:6",
          "value": "cmd:ssh-keyscan=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:7",
          "value": "cmd:ssh-pkcs11-helper=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1ZcQNh1bp4cvmzQ7Y5GLdJ/Sq5Xc="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libcrypto3>=3.1.0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libedit.so.0"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "870943"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-client-default@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=b71447e05cacba06&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-client-default",
      "version": "10.2_p1-r0",
      "description": "OpenBSD's SSH client",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-client-default:openssh-client-default:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-client-default@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client-default:openssh_client_default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client_default:openssh-client-default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client_default:openssh_client_default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client:openssh-client-default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client:openssh_client_default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh-client-default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh_client_default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-client-default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_client_default:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "842560"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "openssh-client=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:ssh=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1VK8JGwPQ8Di/vMFhKI5fes7GY68="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "openssh-keygen=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "openssh-client-common=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "!openssh-client-krb5"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:5",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "377036"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-keygen@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=25da3dd899eac182&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-keygen",
      "version": "10.2_p1-r0",
      "description": "ssh helper program for generating keys",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-keygen:openssh-keygen:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-keygen@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-keygen:openssh_keygen:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_keygen:openssh-keygen:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_keygen:openssh_keygen:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-keygen:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_keygen:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "477480"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:ssh-keygen=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q14sDG6FkBbVqoK93GWoFMBiyUwhk="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libcrypto3>=3.1.0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "207568"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=3069a01426f2d98f&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-server",
      "version": "10.2_p1-r0",
      "description": "OpenSSH server",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-server:openssh-server:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-server:openssh_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server:openssh-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server:openssh_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2220904"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:sshd=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q19+/Oz0D/lqsCw7OXL16axT+pEpk="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "openssh-keygen=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "openssh-server-common=10.2_p1-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "/bin/sh"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:5",
          "value": "so:libz.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "987424"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-server-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a3701027762893d2&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-server-common",
      "version": "10.2_p1-r0",
      "description": "OpenSSH server configuration files",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-server-common:openssh-server-common:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-server-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-server-common:openssh_server_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server_common:openssh-server-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server_common:openssh_server_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-server:openssh-server-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-server:openssh_server_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server:openssh-server-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_server:openssh_server_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-server-common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_server_common:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "3542"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1iBcfh+83oyq0bnE8ussx+xj2k90="
        },
        {
          "name": "syft:metadata:size",
          "value": "3191"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssh-sftp-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=1c6479d4c8fcd94a&upstream=openssh",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssh-sftp-server",
      "version": "10.2_p1-r0",
      "description": "ssh sftp server module",
      "licenses": [
        {
          "license": {
            "id": "SSH-OpenSSH"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-sftp-server:openssh-sftp-server:10.2_p1-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssh-sftp-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&upstream=openssh",
      "externalReferences": [
        {
          "url": "https://www.openssh.com/portable.html",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-sftp-server:openssh_sftp_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_sftp_server:openssh-sftp-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_sftp_server:openssh_sftp_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-sftp:openssh-sftp-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-sftp:openssh_sftp_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_sftp:openssh-sftp-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_sftp:openssh_sftp_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-sftp-server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_sftp_server:10.2_p1-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "eb5354e7d78b417145004210caea9035a58598ab"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "133096"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssh"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1+pq1iT3pP32qijKRErFRz2CRSyI="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "61875"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/openssl@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=01cff82a8c1347b8",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "openssl",
      "version": "3.5.7-r0",
      "description": "Toolkit for Transport Layer Security (TLS)",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssl:openssl:3.5.7-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/openssl@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://www.openssl.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "35c0d1f2b314f647008595f681786813760da191"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "820320"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "openssl"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "openssl3=3.5.7-r0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "cmd:openssl=3.5.7-r0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q18IJ1nL4uAvz40On1ZSpdNBykgnE="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "libssl3=3.5.7-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "libcrypto3=3.5.7-r0"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:3",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:4",
          "value": "so:libssl.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "340133"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/p-map@7.0.4?package-id=aa561d7fb00053a7",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "p-map",
      "version": "7.0.4",
      "description": "Map over promises concurrently",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:p-map:p-map:7.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/p-map@7.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p-map:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p-map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p-map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/p-map/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/pacote@21.5.0?package-id=6d79ea1c7eef99fd",
      "author": "GitHub Inc.",
      "name": "pacote",
      "version": "21.5.0",
      "description": "JavaScript package downloader",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pacote:pacote:21.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pacote@21.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/pacote.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/pacote/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/parse-conflict-json@5.0.1?package-id=7bac85424e41282b",
      "author": "GitHub Inc.",
      "name": "parse-conflict-json",
      "version": "5.0.1",
      "description": "Parse a JSON string that has git merge conflicts, resolving if possible",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse-conflict-json@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/parse-conflict-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict-json:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/parse-conflict-json/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@2.0.2?package-id=b4966ee69fd4e358",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
      "name": "path-scurry",
      "version": "2.0.2",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-scurry:path-scurry:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-scurry@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-scurry:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path-scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/path-scurry/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/pcre2@10.47-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7bdf957aba3b7149",
      "publisher": "Jakub Jirutka <jakub@jirutka.cz>",
      "name": "pcre2",
      "version": "10.47-r0",
      "description": "Perl-compatible regular expression library",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pcre2:pcre2:10.47-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/pcre2@10.47-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://pcre.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2:pcre:10.47-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre:pcre2:10.47-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre:pcre:10.47-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "91bb31c9d95cf6addc2fb2454bc484f7d3a27ec7"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "794272"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "pcre2"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libpcre2-8.so.0=0.15.0"
        },
        {
          "name": "syft:metadata:provides:1",
          "value": "so:libpcre2-posix.so.3=3.0.7"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1VJBZlYFRYnuw9Uab3tlFmIsbwks="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "319854"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.3?package-id=4c3d85355677420d",
      "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
      "name": "picomatch",
      "version": "4.0.3",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/picomatch@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/micromatch/picomatch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@7.1.1?package-id=310cafbbd5abd891",
      "author": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info), Chris Eppstein <chris@eppsteins.net> (http://twitter.com/chriseppstein)",
      "name": "postcss-selector-parser",
      "version": "7.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/postcss-selector-parser@7.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/postcss/postcss-selector-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/proc-log@6.1.0?package-id=1611211fafab4c79",
      "author": "GitHub Inc.",
      "name": "proc-log",
      "version": "6.1.0",
      "description": "just emit 'log' events on the process object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proc-log:proc-log:6.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proc-log@6.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proc-log.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/proc-log/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/proggy@4.0.0?package-id=db1d86c8c07106c9",
      "author": "GitHub Inc.",
      "name": "proggy",
      "version": "4.0.0",
      "description": "Progress bar updates at a distance",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proggy:proggy:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proggy@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proggy.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/proggy/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7bbf5ebf47784848",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "promise-all-reject-late",
      "version": "1.0.1",
      "description": "Like Promise.all, but save rejections until all promises are resolved",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-all-reject-late@1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject-late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject_late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject_late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/promise-call-limit@3.0.2?package-id=a05a45a2d5be8cba",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "promise-call-limit",
      "version": "3.0.2",
      "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-call-limit@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/promise-call-limit",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call-limit:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call_limit:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call_limit:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/promise-call-limit/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/promzard@3.0.1?package-id=fd4666f7f474ad31",
      "author": "GitHub Inc.",
      "name": "promzard",
      "version": "3.0.1",
      "description": "prompting wizardly",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promzard:promzard:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promzard@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/promzard.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/promzard/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=2b514adb3434967b",
      "author": "Gord Tanner <gtanner@gmail.com> (http://github.com/gtanner), Michael Brooks <mikeywbrooks@gmail.com> (http://github.com/mwbrooks)",
      "name": "qrcode-terminal",
      "version": "0.12.0",
      "description": "QRCodes, in the terminal",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/qrcode-terminal@0.12.0",
      "externalReferences": [
        {
          "url": "https://github.com/gtanner/qrcode-terminal",
          "type": "distribution"
        },
        {
          "url": "https://github.com/gtanner/qrcode-terminal",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode-terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode_terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode_terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gtanner:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gtanner:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/qrcode-terminal/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/read@5.0.1?package-id=74ce0a197c106d9a",
      "author": "GitHub Inc.",
      "name": "read",
      "version": "5.0.1",
      "description": "read(1) for node programs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read:read:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/read/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/read-cmd-shim@6.0.0?package-id=161d485e32594db7",
      "author": "GitHub Inc.",
      "name": "read-cmd-shim",
      "version": "6.0.0",
      "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read-cmd-shim@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-cmd-shim.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/read-cmd-shim#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd-shim:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd_shim:read-cmd-shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd_shim:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd:read-cmd-shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd:read-cmd-shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read-cmd-shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:read-cmd-shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:read_cmd_shim:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/read-cmd-shim/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=ccfa5651b74d5894",
      "author": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/safer-buffer/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64&distro=alpine-3.23.4&package-id=0d9a599ad23d3b02&upstream=pax-utils",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "scanelf",
      "version": "1.3.8-r2",
      "description": "Scan ELF binaries for stuff",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.8-r2:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64&distro=alpine-3.23.4&upstream=pax-utils",
      "externalReferences": [
        {
          "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "3912b4fa83437852312ad3c37a00229ff59fab1c"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "67504"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "pax-utils"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:scanelf=1.3.8-r2"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1bqNt1E759jZPDN+r4J6hXS/b4ik="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "32368"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.7.4?package-id=bd58524b5fe05f9a",
      "author": "GitHub Inc.",
      "name": "semver",
      "version": "7.7.4",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:semver:7.7.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/semver@7.7.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/semver/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=f20dee9f7897e24e",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/tapjs/signal-exit.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/signal-exit/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/sigstore@4.1.0?package-id=2c78e6a69535cf08",
      "author": "bdehamer@github.com",
      "name": "sigstore",
      "version": "4.1.0",
      "description": "code-signing for npm packages",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sigstore:sigstore:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/sigstore@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/sigstore/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/simdjson@3.12.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7c08d221f40db73a",
      "publisher": "Simon Zeni <simon@bl4ckb0ne.ca>",
      "name": "simdjson",
      "version": "3.12.0-r0",
      "description": "Parsing gigabytes of JSON per second",
      "licenses": [
        {
          "expression": "Apache-2.0 OR MIT"
        }
      ],
      "cpe": "cpe:2.3:a:simdjson:simdjson:3.12.0-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/simdjson@3.12.0-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://simdjson.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "2b5e2732388d9b1f35e9bcb835aa26b51607fe98"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "240352"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "simdjson"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libsimdjson.so.25=25.0.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q14ObbJgQmj75Eezs7jq1GRYT04eo="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libstdc++.so.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "99532"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/simdutf@7.5.0-r1?arch=x86_64&distro=alpine-3.23.4&package-id=aa4b14ce965bc39c",
      "publisher": "lauren n. liberda <lauren@selfisekai.rocks>",
      "name": "simdutf",
      "version": "7.5.0-r1",
      "description": "Unicode validation and transcoding at billions of characters per second",
      "licenses": [
        {
          "expression": "Apache-2.0 OR MIT"
        }
      ],
      "cpe": "cpe:2.3:a:simdutf:simdutf:7.5.0-r1:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/simdutf@7.5.0-r1?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://simdutf.github.io/simdutf/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "2a88a9f9caa744b739ef289cd02d69f1beffa5c5"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "677840"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "simdutf"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libsimdutf.so.27=27.0.0"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1Z52lBV0mZZ/SuVGL83baA9pevNw="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libgcc_s.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libstdc++.so.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "236804"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=89b647b36466e69d",
      "author": "Josh Glazebrook, syvita",
      "name": "smart-buffer",
      "version": "4.2.0",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/smart-buffer/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/socks@2.8.7?package-id=e55babe454285056",
      "author": "Josh Glazebrook, castorw",
      "name": "socks",
      "version": "2.8.7",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks@2.8.7",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/socks.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks:2.8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/socks/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=ea73c863fffef408",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
      "name": "socks-proxy-agent",
      "version": "8.0.5",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks-proxy-agent@8.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0?package-id=a716c00872c1b6a2",
      "author": "The Linux Foundation, Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "description": "list of SPDX standard license exceptions",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/spdx-exceptions/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0?package-id=629ebd5716ff7fc4",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "4.0.0",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.23?package-id=8c680aa0bb9ba231",
      "author": "Shinnosuke Watanabe (https://github.com/shinnn)",
      "name": "spdx-license-ids",
      "version": "3.0.23",
      "description": "A list of SPDX license identifiers",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-license-ids@3.0.23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license-ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/spdx-license-ids/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/sqlite-libs@3.51.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=96d62c90891a3dee&upstream=sqlite",
      "publisher": "Celeste <cielesti@protonmail.com>",
      "name": "sqlite-libs",
      "version": "3.51.2-r0",
      "description": "C library that implements an SQL database engine (libraries)",
      "licenses": [
        {
          "license": {
            "id": "blessing"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.51.2-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/sqlite-libs@3.51.2-r0?arch=x86_64&distro=alpine-3.23.4&upstream=sqlite",
      "externalReferences": [
        {
          "url": "https://www.sqlite.org/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite-libs:sqlite_libs:3.51.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite-libs:3.51.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite_libs:3.51.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite-libs:3.51.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite_libs:3.51.2-r0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "96d082e06b923101f6ebcd7137e16a258c52c140"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1615472"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "sqlite"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libsqlite3.so.0=3.51.2"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1igzsXCvtc/VBUYl4Uuz3x0jQ3eo="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "863761"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=70e62fc46b7f6a24&upstream=busybox",
      "publisher": "Sören Tempel <soeren+alpine@soeren-tempel.net>",
      "name": "ssl_client",
      "version": "1.37.0-r30",
      "description": "External ssl_client for busybox wget",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.37.0-r30:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&upstream=busybox",
      "externalReferences": [
        {
          "url": "https://busybox.net/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ssl-client:ssl_client:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ssl_client:ssl-client:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ssl_client:ssl_client:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ssl:ssl-client:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ssl:ssl_client:1.37.0-r30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "1e823a60eb85606954b3a5af5f8e5bbd1ea680cf"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "14384"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "busybox"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "cmd:ssl_client=1.37.0-r30"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1W27Ak5z8m+R9lnejFSxUfMGLXt0="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:pullDependencies:1",
          "value": "so:libcrypto.so.3"
        },
        {
          "name": "syft:metadata:pullDependencies:2",
          "value": "so:libssl.so.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "4681"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ssri@13.0.1?package-id=d771fcf922e056ef",
      "author": "GitHub Inc.",
      "name": "ssri",
      "version": "13.0.1",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssri_project:ssri:13.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ssri@13.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ssri.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/ssri/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@10.2.2?package-id=f29a7d33fe5343f3",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "supports-color",
      "version": "10.2.2",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:supports-color:supports-color:10.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/supports-color@10.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports-color:supports_color:10.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports_color:supports-color:10.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports_color:supports_color:10.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports:supports-color:10.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports:supports_color:10.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/supports-color/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tar@7.5.11?package-id=642df124d4347f65",
      "author": "Isaac Z. Schlueter",
      "name": "tar",
      "version": "7.5.11",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.11:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tar@7.5.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-tar.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.11:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tar/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0?package-id=6a7094ce66a8e5be",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "text-table",
      "version": "0.2.0",
      "description": "borderless text tables with alignment",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/text-table.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/substack/text-table",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-table:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_table:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_table:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/text-table/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tiny-relative-date@2.0.2?package-id=883f67bc17ffebd0",
      "author": "Joseph Wynn <joseph@wildlyinaccurate.com> (https://wildlyinaccurate.com/)",
      "name": "tiny-relative-date",
      "version": "2.0.2",
      "description": "Tiny function that provides relative, human-readable dates.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tiny-relative-date@2.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/wildlyinaccurate/relative-date.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative-date:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative_date:tiny-relative-date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative_date:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wildlyinaccurate:tiny-relative-date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wildlyinaccurate:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative:tiny-relative-date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative:tiny-relative-date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny-relative-date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny_relative_date:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tiny-relative-date/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tinyglobby@0.2.15?package-id=3c878e26e8669e8e",
      "author": "Superchupu",
      "name": "tinyglobby",
      "version": "0.2.15",
      "description": "A fast and minimal alternative to globby and fast-glob",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyglobby@0.2.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/SuperchupuDev/tinyglobby.git",
          "type": "distribution"
        },
        {
          "url": "https://superchupu.dev/tinyglobby",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tinyglobby/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/treeverse@3.0.0?package-id=472c53dfa2e5a263",
      "author": "GitHub Inc.",
      "name": "treeverse",
      "version": "3.0.0",
      "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:treeverse:treeverse:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/treeverse@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/npm/treeverse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:treeverse:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/treeverse/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tuf-js@4.1.0?package-id=497b80177662d06b",
      "author": "bdehamer@github.com",
      "name": "tuf-js",
      "version": "4.1.0",
      "description": "JavaScript implementation of The Update Framework (TUF)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:theupdateframework:tuf-js:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tuf-js@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:tuf_js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf-js:tuf-js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf-js:tuf_js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf_js:tuf-js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf_js:tuf_js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf:tuf-js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf:tuf_js:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/tuf-js/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=484f818fd2ed4109",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/util-deprecate/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-name@7.0.2?package-id=0e43195b9f1b1975",
      "author": "GitHub Inc.",
      "name": "validate-npm-package-name",
      "version": "7.0.2",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/validate-npm-package-name@7.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/validate-npm-package-name.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/validate-npm-package-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package-name:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/walk-up-path@4.0.0?package-id=1d07700a3e3b9575",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "walk-up-path",
      "version": "4.0.0",
      "description": "Given a path string, return a generator that walks up the path, emitting each dirname.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/walk-up-path@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/walk-up-path",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up-path:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/walk-up-path/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/which@6.0.1?package-id=00e9d8e26b0a273a",
      "author": "GitHub Inc.",
      "name": "which",
      "version": "6.0.1",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:which:which:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/which/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@7.0.1?package-id=54ca6704947a32c1",
      "author": "GitHub Inc.",
      "name": "write-file-atomic",
      "version": "7.0.1",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:7.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/write-file-atomic@7.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/write-file-atomic.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/write-file-atomic",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file-atomic:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file_atomic:write-file-atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file_atomic:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file:write-file-atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file:write-file-atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write:write-file-atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:write-file-atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:write_file_atomic:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/write-file-atomic/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=36f671c64e793ede",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-flush/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=616dd037e40c0513",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/yallist@5.0.0?package-id=d76f0f6eb52812e5",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "5.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/node_modules/npm/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "zlib",
      "version": "1.3.2-r0",
      "description": "A compression/decompression Library",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "cpe": "cpe:2.3:a:zlib:zlib:1.3.2-r0:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4",
      "externalReferences": [
        {
          "url": "https://zlib.net/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:fdb7f7d739c7dc736b6dd49b7ae5686807ff9915f3b7c70ea0aef01741c6c736"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:6:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:7:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "f8c94d2e1d318ab29eb4ac5f00225341c877ed65"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "108376"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "zlib"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libz.so.1=1.3.2"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q1aLuX6lJV53qpdOZUdtZIMq1WKIo="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "56191"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=alpine-3.23.4&package-id=4dbf173cf72694fb&upstream=zstd",
      "publisher": "Natanael Copa <ncopa@alpinelinux.org>",
      "name": "zstd-libs",
      "version": "1.5.7-r2",
      "description": "Zstandard - Fast real-time compression algorithm (libraries)",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR GPL-2.0-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:zstd-libs:zstd-libs:1.5.7-r2:*:*:*:*:*:*:*",
      "purl": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=alpine-3.23.4&upstream=zstd",
      "externalReferences": [
        {
          "url": "https://facebook.github.io/zstd/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "apk-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "apk"
        },
        {
          "name": "syft:package:metadataType",
          "value": "apk-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-libs:zstd_libs:1.5.7-r2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_libs:zstd-libs:1.5.7-r2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_libs:zstd_libs:1.5.7-r2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-libs:1.5.7-r2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_libs:1.5.7-r2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d5a6b7ed9ed10580226843deb5f2c86b59005ab0a0797353c1a2c4ab3e003fe4"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:bf08e04822c596c7b950cab965bc81fe1228b6ca7c2b92fc01aad009daeae116"
        },
        {
          "name": "syft:location:1:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:82a146fefdd729bf3d5bd05e827c25357a0dea75de95bfa44b6572083fe420ec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:2695fa7fcb1089c82c7169932d02b524299bb7a8b34485a15e3f9c23a8889478"
        },
        {
          "name": "syft:location:3:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8a54fb95b194a0e1a6b3d4f1a52f725dbd415c939574154d0d5b40c4d1aca20a"
        },
        {
          "name": "syft:location:4:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:d13e40da084506ef51252d346b073f99e5840a295bfc89a06cbcdb21940d4107"
        },
        {
          "name": "syft:location:5:path",
          "value": "/lib/apk/db/installed"
        },
        {
          "name": "syft:metadata:gitCommitOfApkPort",
          "value": "3c6e2ee2b16f403d53eab39c4426eb61f003c322"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "710336"
        },
        {
          "name": "syft:metadata:originPackage",
          "value": "zstd"
        },
        {
          "name": "syft:metadata:provides:0",
          "value": "so:libzstd.so.1=1.5.7"
        },
        {
          "name": "syft:metadata:pullChecksum",
          "value": "Q11Qe4rDxDNaQEBawg5JusnUNkK+Y="
        },
        {
          "name": "syft:metadata:pullDependencies:0",
          "value": "so:libc.musl-x86_64.so.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "373813"
        }
      ]
    },
    {
      "type": "operating-system",
      "bom-ref": "os:alpine@3.23.4",
      "name": "alpine",
      "version": "3.23.4",
      "description": "Alpine Linux v3.23",
      "swid": {
        "tagId": "alpine",
        "name": "alpine",
        "version": "3.23.4",
        "tagVersion": 0,
        "patch": false
      },
      "externalReferences": [
        {
          "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://alpinelinux.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:distro:extendedSupport",
          "value": "false"
        },
        {
          "name": "syft:distro:id",
          "value": "alpine"
        },
        {
          "name": "syft:distro:prettyName",
          "value": "Alpine Linux v3.23"
        },
        {
          "name": "syft:distro:versionID",
          "value": "3.23.4"
        }
      ]
    },
    {
      "type": "container",
      "bom-ref": "1492a7ab3178e3dd",
      "name": "docker.io/healthsamurai/aidboxone",
      "version": "edge"
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/Aidbox/Aidbox@edge?type=jar",
      "dependsOn": [
        "pkg:maven/borkdude/edamame@1.4.30?type=jar",
        "pkg:maven/bsless/clj-fast@0.0.11?type=jar",
        "pkg:maven/care.better.platform/web-template@4.2.0?type=jar",
        "pkg:maven/cheshire/cheshire@6.0.0?type=jar",
        "pkg:maven/clj-commons/clj-yaml@1.0.29?type=jar",
        "pkg:maven/clj-http/clj-http@3.13.0?type=jar",
        "pkg:maven/clj-pdf/clj-pdf@2.7.0?type=jar",
        "pkg:maven/clojure-elastic-apm/clojure-elastic-apm@0.13.1?type=jar",
        "pkg:maven/co.elastic.apm/apm-agent-api@1.54.0?type=jar",
        "pkg:maven/com.apollographql.federation/federation-graphql-java-support@5.5.0?type=jar",
        "pkg:maven/com.appsflyer/pronto@3.0.0?type=jar",
        "pkg:maven/com.azure/azure-identity@1.18.1?type=jar",
        "pkg:maven/com.azure/azure-storage-blob@12.35.0?type=jar",
        "pkg:maven/com.cognitect/transit-clj@1.0.333?type=jar",
        "pkg:maven/com.cronutils/cron-utils@9.2.1?type=jar",
        "pkg:maven/com.draines/postal@2.0.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.7.1?type=jar",
        "pkg:maven/com.github.seancorfield/next.jdbc@1.3.1048?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-pubsub@1.140.1?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-storage@2.58.1?type=jar",
        "pkg:maven/com.goterl/lazysodium-java@5.2.0?type=jar",
        "pkg:maven/com.graphql-java/graphql-java@24.3?type=jar",
        "pkg:maven/com.helger.schematron/ph-schematron-xslt@8.0.6?type=jar",
        "pkg:maven/com.rpl/specter@1.1.4?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.5?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.5?type=jar",
        "pkg:maven/com.velisco/clj-ftp@1.2.0?type=jar",
        "pkg:maven/com.widdindustries/cljc.java-time@0.1.21?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/crypto-password/crypto-password@0.3.0?type=jar",
        "pkg:maven/dev.weavejester/medley@1.8.1?type=jar",
        "pkg:maven/funcool/cuerdas@2023.11.09-407?type=jar",
        "pkg:maven/funcool/promesa@11.0.678?type=jar",
        "pkg:maven/garden/garden@1.3.10?type=jar",
        "pkg:maven/hawk/hawk@0.2.11?type=jar",
        "pkg:maven/hiccup/hiccup@2.0.0?type=jar",
        "pkg:maven/honeysql/honeysql@1.0.461?type=jar",
        "pkg:maven/http-kit/http-kit@2.9.0-beta2?type=jar",
        "pkg:maven/io.airlift/aircompressor@2.0.3?type=jar",
        "pkg:maven/io.forward/yaml@1.0.11?type=jar",
        "pkg:maven/io.healthsamurai.aidbox/api@0.0.13?type=jar",
        "pkg:maven/io.opentelemetry.proto/opentelemetry-proto@1.3.2-alpha?type=jar",
        "pkg:maven/juji/editscript@0.6.6?type=jar",
        "pkg:maven/markdown-clj/markdown-clj@1.12.4?type=jar",
        "pkg:maven/metosin/jsonista@0.3.13?type=jar",
        "pkg:maven/nano-id/nano-id@1.1.0?type=jar",
        "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.11.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.2?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar",
        "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar",
        "pkg:maven/org.babashka/sci@0.10.46?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar",
        "pkg:maven/org.clj-commons/clj-ssh@0.6.6?type=jar",
        "pkg:maven/org.clojure/clojure@1.12.0?type=jar",
        "pkg:maven/org.clojure/core.async@1.9.808-alpha1?type=jar",
        "pkg:maven/org.clojure/core.match@1.1.0?type=jar",
        "pkg:maven/org.clojure/data.csv@1.1.0?type=jar",
        "pkg:maven/org.clojure/data.priority-map@1.2.0?type=jar",
        "pkg:maven/org.clojure/data.xml@0.2.0-alpha9?type=jar",
        "pkg:maven/org.clojure/java.jdbc@0.7.12?type=jar",
        "pkg:maven/org.clojure/spec.alpha@0.6.249?type=jar",
        "pkg:maven/org.clojure/tools.reader@1.5.2?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.8?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/opt-1.4@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/serialisation@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/web-template@2.25.0?type=jar",
        "pkg:maven/org.flatland/ordered@1.15.12?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-nop@2.1.0-alpha1?type=jar",
        "pkg:maven/pandect/pandect@1.0.2?type=jar",
        "pkg:maven/rewrite-clj/rewrite-clj@1.2.50?type=jar",
        "pkg:maven/ring/ring-defaults@0.6.0?type=jar",
        "pkg:maven/ring/ring@1.15.3?type=jar",
        "pkg:maven/selmer/selmer@1.12.62?type=jar",
        "pkg:maven/software.amazon.awssdk/auth@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/s3@2.44.9?type=jar",
        "pkg:maven/superlifter/superlifter@0.1.5?type=jar",
        "pkg:maven/taipei.404/html-to-hiccup@0.1.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/selmer/selmer@1.12.62?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/clojure@1.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/core.specs.alpha@0.4.74?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/core.specs.alpha@0.4.74?type=jar"
    },
    {
      "ref": "pkg:maven/com.apollographql.federation/federation-graphql-java-support@5.5.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.draines/postal@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/com.sun.mail/jakarta.mail@1.6.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5?type=jar",
      "dependsOn": [
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/web-template@2.25.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.nedap.healthcare.archie/tools@3.13.0?type=jar",
        "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/aql@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/terminology@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/util@2.25.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/tools@3.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.esotericsoftware.kryo/kryo5@5.6.2?type=jar",
        "pkg:maven/com.github.zafarkhaja/java-semver@0.10.2?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/aom@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/base@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/bmm@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/grammars@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/openehr-terminology@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/path-queries@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/utils@3.13.0?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar",
        "pkg:maven/org.glassfish/jakarta.json@2.0.1?classifier=module&type=jar",
        "pkg:maven/org.leadpony.justify/justify@3.1.0?type=jar",
        "pkg:maven/org.reflections/reflections@0.10.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.activation/activation@1.1.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.zafarkhaja/java-semver@0.10.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/grammars@3.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.antlr/antlr4@4.13.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4@4.13.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.abego.treelayout/org.abego.treelayout.core@1.0.3?type=jar",
        "pkg:maven/org.antlr/ST4@4.3.4?type=jar",
        "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.antlr/ST4@4.3.4?type=jar"
    },
    {
      "ref": "pkg:maven/org.abego.treelayout/org.abego.treelayout.core@1.0.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/base@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/aom@3.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.nedap.healthcare.archie/odin@3.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/odin@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/bmm@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/path-queries@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/utils@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/openehr-terminology@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.leadpony.justify/justify@3.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.ibm.icu/icu4j@68.1?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.ibm.icu/icu4j@68.1?type=jar"
    },
    {
      "ref": "pkg:maven/org.glassfish/jakarta.json@2.0.1?classifier=module&type=jar"
    },
    {
      "ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
    },
    {
      "ref": "pkg:maven/com.esotericsoftware.kryo/kryo5@5.6.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/aql@2.25.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.nedap.healthcare.archie/archie-utils@3.13.0?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/openehr-rm@3.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/openehr-rm@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/archie-utils@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/util@2.25.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/terminology@2.25.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"
    },
    {
      "ref": "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
    },
    {
      "ref": "pkg:maven/taipei.404/html-to-hiccup@0.1.8?type=jar",
      "dependsOn": [
        "pkg:maven/instaparse/instaparse@1.4.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/instaparse/instaparse@1.4.10?type=jar"
    },
    {
      "ref": "pkg:maven/com.velisco/clj-ftp@1.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/clj-commons/fs@1.6.310?type=jar",
        "pkg:maven/commons-net/commons-net@3.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/clj-commons/fs@1.6.310?type=jar",
      "dependsOn": [
        "pkg:maven/org.tukaani/xz@1.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.tukaani/xz@1.8?type=jar"
    },
    {
      "ref": "pkg:maven/commons-net/commons-net@3.10.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.helger.schematron/ph-schematron-xslt@8.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.helger.schematron/ph-schematron-api@8.0.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.helger.schematron/ph-schematron-api@8.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.helger.commons/ph-commons@11.2.0?type=jar",
        "pkg:maven/com.helger.commons/ph-jaxb@11.2.0?type=jar",
        "pkg:maven/com.helger.commons/ph-xml@11.2.0?type=jar",
        "pkg:maven/com.helger.xsd/ph-xsds-xml@3.0.0?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.helger.commons/ph-commons@11.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.helger.commons/ph-xml@11.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.helger.commons/ph-jaxb@11.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.helger.xsd/ph-xsds-xml@3.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/spec.alpha@0.6.249?type=jar"
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.11.1?type=jar"
    },
    {
      "ref": "pkg:maven/pandect/pandect@1.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/crypto-password/crypto-password@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/at.favre.lib/bcrypt@0.9.0?type=jar",
        "pkg:maven/com.lambdaworks/scrypt@1.4.0?type=jar",
        "pkg:maven/crypto-equality/crypto-equality@1.0.0?type=jar",
        "pkg:maven/crypto-random/crypto-random@1.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/crypto-random/crypto-random@1.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/crypto-equality/crypto-equality@1.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/at.favre.lib/bcrypt@0.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/at.favre.lib/bytes@1.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/at.favre.lib/bytes@1.3.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.lambdaworks/scrypt@1.4.0?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/s3@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/annotations@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/apache-client@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/arns@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/aws-core@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/checksums-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/checksums@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/crt-core@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/endpoints-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/http-auth-aws@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/http-auth-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/http-auth@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/http-client-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/identity-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/json-utils@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/metrics-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/netty-nio-client@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/profiles@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/protocol-core@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/regions@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/retries-spi@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/sdk-core@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/utils@2.44.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.44.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/protocol-core@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/arns@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/profiles@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/crt-core@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/http-auth@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/identity-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/checksums@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/checksums-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/retries-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/sdk-core@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/retries@2.44.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/retries@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/http-client-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/regions@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/annotations@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/utils@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/aws-core@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/utils-lite@2.44.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/utils-lite@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/metrics-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/json-utils@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.44.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/apache-client@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/netty-nio-client@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-buffer@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.133.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.133.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-common@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-handler@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-resolver@4.1.133.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.healthsamurai.aidbox/api@0.0.13?type=jar"
    },
    {
      "ref": "pkg:maven/com.cronutils/cron-utils@9.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-storage@2.58.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
        "pkg:maven/com.google.android/annotations@4.1.1.4?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
        "pkg:maven/com.google.api.grpc/gapic-google-cloud-storage-v2@2.58.1?type=jar",
        "pkg:maven/com.google.api.grpc/grpc-google-cloud-storage-v2@2.58.1?type=jar",
        "pkg:maven/com.google.api.grpc/proto-google-cloud-monitoring-v3@3.52.0?type=jar",
        "pkg:maven/com.google.api.grpc/proto-google-cloud-storage-v2@2.58.1?type=jar",
        "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.61.3?type=jar",
        "pkg:maven/com.google.api.grpc/proto-google-iam-v1@1.56.3?type=jar",
        "pkg:maven/com.google.api/api-common@2.53.3?type=jar",
        "pkg:maven/com.google.api/gax-grpc@2.70.3?type=jar",
        "pkg:maven/com.google.api/gax-httpjson@2.70.3?type=jar",
        "pkg:maven/com.google.api/gax@2.70.3?type=jar",
        "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20250925-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.39.1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.39.1?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.cloud.opentelemetry/detector-resources-support@0.33.0?type=jar",
        "pkg:maven/com.google.cloud.opentelemetry/exporter-metrics@0.33.0?type=jar",
        "pkg:maven/com.google.cloud.opentelemetry/shared-resourcemapping@0.33.0?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-core-grpc@2.60.3?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-core-http@2.60.3?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-core@2.60.3?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-monitoring@3.52.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
        "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.47.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-appengine@1.47.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.47.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-jackson2@1.47.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.47.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.8?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/io.grpc/grpc-alts@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-api@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-auth@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-core@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-googleapis@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-grpclb@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-inprocess@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-netty-shaded@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-opentelemetry@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-protobuf-lite@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-protobuf@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-rls@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-services@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-stub@1.71.0?type=jar",
        "pkg:maven/io.grpc/grpc-util@1.71.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
        "pkg:maven/io.opentelemetry.contrib/opentelemetry-gcp-resources@1.37.0-alpha?type=jar",
        "pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.29.0-alpha?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-api@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-context@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk-common@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk-logs@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk-metrics@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk-trace@1.47.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-sdk@1.47.0?type=jar",
        "pkg:maven/io.perfmark/perfmark-api@0.27.0?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar",
        "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.24?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.2?type=jar",
        "pkg:maven/org.threeten/threetenbp@1.7.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@1.47.1?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.47.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.47.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.47.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20250925-2.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-core@2.60.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-core-http@2.60.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-appengine@1.47.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api/gax-httpjson@2.70.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-core-grpc@2.60.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.70.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api/gax-grpc@2.70.3?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-inprocess@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-alts@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-grpclb@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.2?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-auth@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.39.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.39.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.53.3?type=jar"
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-context@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/proto-google-iam-v1@1.56.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.8?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-core@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.android/annotations@4.1.1.4?type=jar"
    },
    {
      "ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.24?type=jar"
    },
    {
      "ref": "pkg:maven/io.perfmark/perfmark-api@0.27.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-protobuf@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-protobuf-lite@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.61.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.threeten/threetenbp@1.7.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-storage-v2@2.58.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/grpc-google-cloud-storage-v2@2.58.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/gapic-google-cloud-storage-v2@2.58.1?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-trace@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-logs@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-opentelemetry@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-api@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-metrics@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-common@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi@1.47.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.29.0-alpha?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud.opentelemetry/exporter-metrics@0.33.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-monitoring@3.52.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-monitoring-v3@3.52.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud.opentelemetry/shared-resourcemapping@0.33.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry.contrib/opentelemetry-gcp-resources@1.37.0-alpha?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud.opentelemetry/detector-resources-support@0.33.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-netty-shaded@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-util@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-stub@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-googleapis@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-services@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar"
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-rls@1.71.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.google.cloud/google-cloud-pubsub@1.140.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api.grpc/proto-google-cloud-pubsub-v1@1.122.1?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.26.0-alpha?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api.grpc/proto-google-cloud-pubsub-v1@1.122.1?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.26.0-alpha?type=jar"
    },
    {
      "ref": "pkg:maven/com.widdindustries/cljc.java-time@0.1.21?type=jar",
      "dependsOn": [
        "pkg:maven/com.widdindustries/cljs.java-time@0.1.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.widdindustries/cljs.java-time@0.1.20?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-defaults@0.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ring-clojure/ring-websocket-middleware@0.2.1?type=jar",
        "pkg:maven/ring/ring-anti-forgery@1.4.0?type=jar",
        "pkg:maven/ring/ring-core@1.13.0?type=jar",
        "pkg:maven/ring/ring-headers@0.4.0?type=jar",
        "pkg:maven/ring/ring-ssl@0.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ring/ring-core@1.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M1?type=jar",
        "pkg:maven/org.ring-clojure/ring-core-protocols@1.13.0?type=jar",
        "pkg:maven/org.ring-clojure/ring-websocket-protocols@1.13.0?type=jar",
        "pkg:maven/ring/ring-codec@1.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ring-clojure/ring-core-protocols@1.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.ring-clojure/ring-websocket-protocols@1.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-codec@1.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M1?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-ssl@0.4.0?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-headers@0.4.0?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-anti-forgery@1.4.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.ring-clojure/ring-websocket-middleware@0.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar"
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "ref": "pkg:maven/rewrite-clj/rewrite-clj@1.2.50?type=jar"
    },
    {
      "ref": "pkg:maven/honeysql/honeysql@1.0.461?type=jar"
    },
    {
      "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar",
      "dependsOn": [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.goterl/lazysodium-java@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.goterl/resource-loader@2.1.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.java.dev.jna/jna@5.17.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.goterl/resource-loader@2.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.flatland/ordered@1.15.12?type=jar"
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar"
    },
    {
      "ref": "pkg:maven/clj-pdf/clj-pdf@2.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.librepdf/openpdf@1.3.32?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-anim@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-bridge@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-codec@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.4?type=jar",
        "pkg:maven/org.jfree/jfreechart@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.librepdf/openpdf@1.3.32?type=jar"
    },
    {
      "ref": "pkg:maven/org.jfree/jfreechart@1.5.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-bridge@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-dom@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-gvt@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-parser@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-script@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-xml@1.17?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-dom@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-gvt@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-parser@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-script@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-xml@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-anim@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlgraphics/batik-ext@1.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-ext@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-codec@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlgraphics/batik-svggen@1.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/batik-svggen@1.17?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.4?type=jar"
    },
    {
      "ref": "pkg:maven/markdown-clj/markdown-clj@1.12.4?type=jar"
    },
    {
      "ref": "pkg:maven/clj-http/clj-http@3.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
        "pkg:maven/potemkin/potemkin@0.4.7?type=jar",
        "pkg:maven/slingshot/slingshot@0.12.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.14?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar"
    },
    {
      "ref": "pkg:maven/slingshot/slingshot@0.12.2?type=jar"
    },
    {
      "ref": "pkg:maven/potemkin/potemkin@0.4.7?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/serialisation@2.25.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2?type=jar",
        "pkg:maven/com.nedap.healthcare.archie/test-rm@3.13.0?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/generator-commons@2.25.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nedap.healthcare.archie/test-rm@3.13.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/generator-commons@2.25.0?type=jar"
    },
    {
      "ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
    },
    {
      "ref": "pkg:maven/io.opentelemetry.proto/opentelemetry-proto@1.3.2-alpha?type=jar"
    },
    {
      "ref": "pkg:maven/org.clj-commons/clj-ssh@0.6.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.mwiede/jsch@0.2.15?type=jar",
        "pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.8.3?type=pom",
        "pkg:maven/org.clojure/tools.logging@1.2.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.logging@1.2.4?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.mwiede/jsch@0.2.15?type=jar"
    },
    {
      "ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.8.3?type=pom",
      "dependsOn": [
        "pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.8.3?type=jar",
        "pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.8.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.8.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.8.3?type=jar"
    },
    {
      "ref": "pkg:maven/io.airlift/aircompressor@2.0.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-storage-blob@12.35.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.azure/azure-core-http-netty@1.16.5?type=jar",
        "pkg:maven/com.azure/azure-core@1.58.1?type=jar",
        "pkg:maven/com.azure/azure-storage-common@12.34.0?type=jar",
        "pkg:maven/com.azure/azure-storage-internal-avro@12.20.0?type=jar",
        "pkg:maven/com.azure/azure-xml@1.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.azure/azure-xml@1.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-core@1.58.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.projectreactor/reactor-core@3.7.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.projectreactor/reactor-core@3.7.18?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-core-http-netty@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=windows-x86_64&type=jar",
        "pkg:maven/io.netty/netty-tcnative-classes@2.0.78.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-classes@2.0.78.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.78.Final?classifier=windows-x86_64&type=jar"
    },
    {
      "ref": "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.18?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
        "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "dependsOn": [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar"
    },
    {
      "ref": "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.18?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-storage-common@12.34.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-storage-internal-avro@12.20.0?type=jar"
    },
    {
      "ref": "pkg:maven/funcool/cuerdas@2023.11.09-407?type=jar"
    },
    {
      "ref": "pkg:maven/com.appsflyer/pronto@3.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/hiccup/hiccup@2.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/clojure-elastic-apm/clojure-elastic-apm@0.13.1?type=jar"
    },
    {
      "ref": "pkg:maven/superlifter/superlifter@0.1.5?type=jar",
      "dependsOn": [
        "pkg:maven/funcool/urania@0.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/funcool/urania@0.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/data.xml@0.2.0-alpha9?type=jar"
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.5?type=jar"
    },
    {
      "ref": "pkg:maven/bsless/clj-fast@0.0.11?type=jar"
    },
    {
      "ref": "pkg:maven/com.azure/azure-identity@1.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.azure/azure-json@1.5.0?type=jar",
        "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.3.0?type=jar",
        "pkg:maven/com.microsoft.azure/msal4j@1.23.1?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.azure/azure-json@1.5.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.microsoft.azure/msal4j@1.23.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.3.0?type=jar"
    },
    {
      "ref": "pkg:maven/net.java.dev.jna/jna-platform@5.17.0?type=jar"
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
    },
    {
      "ref": "pkg:maven/borkdude/edamame@1.4.30?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/data.csv@1.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-nop@2.1.0-alpha1?type=jar"
    },
    {
      "ref": "pkg:maven/com.cognitect/transit-clj@1.0.333?type=jar",
      "dependsOn": [
        "pkg:maven/com.cognitect/transit-java@1.0.371?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.cognitect/transit-java@1.0.371?type=jar",
      "dependsOn": [
        "pkg:maven/org.msgpack/msgpack@0.6.12?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.msgpack/msgpack@0.6.12?type=jar",
      "dependsOn": [
        "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.1048?type=jar",
      "dependsOn": [
        "pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3?type=jar",
        "pkg:maven/org.clojure/java.data@1.3.113?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/java.data@1.3.113?type=jar"
    },
    {
      "ref": "pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/java.jdbc@0.7.12?type=jar"
    },
    {
      "ref": "pkg:maven/nano-id/nano-id@1.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/auth@2.44.9?type=jar",
      "dependsOn": [
        "pkg:maven/software.amazon.awssdk/http-auth-aws-eventstream@2.44.9?type=jar",
        "pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/software.amazon.awssdk/http-auth-aws-eventstream@2.44.9?type=jar"
    },
    {
      "ref": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar"
    },
    {
      "ref": "pkg:maven/clj-commons/clj-yaml@1.0.29?type=jar",
      "dependsOn": [
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar"
    },
    {
      "ref": "pkg:maven/funcool/promesa@11.0.678?type=jar"
    },
    {
      "ref": "pkg:maven/cheshire/cheshire@6.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.18.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.18.3?type=jar",
        "pkg:maven/tigris/tigris@0.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.18.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.18.3?type=jar"
    },
    {
      "ref": "pkg:maven/tigris/tigris@0.1.2?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.7.1?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/core.match@1.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar"
    },
    {
      "ref": "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/tools.reader@1.5.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.ehrbase.openehr.sdk/opt-1.4@2.25.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.xmlbeans/xmlbeans@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.xmlbeans/xmlbeans@3.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.babashka/sci@0.10.46?type=jar",
      "dependsOn": [
        "pkg:maven/borkdude/graal.locking@0.0.2?type=jar",
        "pkg:maven/borkdude/sci.impl.reflector@0.0.5?type=jar",
        "pkg:maven/org.babashka/sci.impl.types@0.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/borkdude/sci.impl.reflector@0.0.5?type=jar"
    },
    {
      "ref": "pkg:maven/org.babashka/sci.impl.types@0.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/borkdude/graal.locking@0.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/dev.weavejester/medley@1.8.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.rpl/specter@1.1.4?type=jar",
      "dependsOn": [
        "pkg:maven/riddley/riddley@0.1.12?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/riddley/riddley@0.1.12?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.2?type=jar"
    },
    {
      "ref": "pkg:maven/io.forward/yaml@1.0.11?type=jar"
    },
    {
      "ref": "pkg:maven/metosin/jsonista@0.3.13?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar"
    },
    {
      "ref": "pkg:maven/hawk/hawk@0.2.11?type=jar",
      "dependsOn": [
        "pkg:maven/net.incongru.watchservice/barbary-watchservice@1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.incongru.watchservice/barbary-watchservice@1.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.java.dev.jna/jna@3.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ring/ring@1.15.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.ring-clojure/ring-jakarta-servlet@1.15.3?type=jar",
        "pkg:maven/ring/ring-devel@1.15.3?type=jar",
        "pkg:maven/ring/ring-jetty-adapter@1.15.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ring/ring-devel@1.15.3?type=jar",
      "dependsOn": [
        "pkg:maven/clj-stacktrace/clj-stacktrace@0.2.8?type=jar",
        "pkg:maven/ns-tracker/ns-tracker@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/clj-stacktrace/clj-stacktrace@0.2.8?type=jar"
    },
    {
      "ref": "pkg:maven/ns-tracker/ns-tracker@1.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/java.classpath@1.1.0?type=jar",
        "pkg:maven/org.clojure/tools.namespace@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.namespace@1.5.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/java.classpath@1.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/ring/ring-jetty-adapter@1.15.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-servlet@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-unixdomain-server@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-unixdomain-server@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-servlet@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-nested@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-security@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-nested@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-security@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-api@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-common@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-webapp@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9/jetty-ee9-webapp@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-api@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-common@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-common@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-common@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-server@12.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.websocket/jetty-websocket-core-server@12.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.ring-clojure/ring-jakarta-servlet@1.15.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/data.priority-map@1.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/web-template@4.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/care.better.platform/ehr-common-amnode@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-json-jackson@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-model@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-path@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-terminology@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-time@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-utils@4.2.0?type=jar",
        "pkg:maven/care.better.platform/ehr-common-xml-jaxb@4.2.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.18.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.20?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.20?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.20?type=jar",
        "pkg:maven/org.jetbrains/annotations@23.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.20?type=jar"
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.20?type=jar"
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.20?type=jar"
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@23.1.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-model@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-utils@4.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/joda-time/joda-time@2.12.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/joda-time/joda-time@2.12.5?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-time@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-json-jackson@4.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-kotlin@2.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-kotlin@2.18.3?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-terminology@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-xml-jaxb@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-path@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/care.better.platform/ehr-common-amnode@4.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.18.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"
    },
    {
      "ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.8?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.8?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.8?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.8?type=jar"
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.8?type=jar"
    },
    {
      "ref": "pkg:maven/com.graphql-java/graphql-java@24.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.graphql-java/java-dataloader@5.0.3?type=jar",
        "pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.graphql-java/java-dataloader@5.0.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar"
    },
    {
      "ref": "pkg:maven/co.elastic.apm/apm-agent-api@1.54.0?type=jar"
    },
    {
      "ref": "pkg:maven/garden/garden@1.3.10?type=jar",
      "dependsOn": [
        "pkg:maven/com.yahoo.platform.yui/yuicompressor@2.4.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.yahoo.platform.yui/yuicompressor@2.4.8?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/core.async@1.9.808-alpha1?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/core.memoize@1.1.266?type=jar",
        "pkg:maven/org.clojure/tools.analyzer@1.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.analyzer@1.2.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/core.memoize@1.1.266?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/core.cache@1.1.234?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/core.cache@1.1.234?type=jar"
    },
    {
      "ref": "pkg:maven/juji/editscript@0.6.6?type=jar"
    },
    {
      "ref": "pkg:maven/http-kit/http-kit@2.9.0-beta2?type=jar"
    },
    {
      "ref": "pkg:maven/zen-lang/zen@0.0.1-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/borkdude/edamame@1.3.22?type=jar",
        "pkg:maven/hawk/hawk@0.2.11?type=jar",
        "pkg:maven/healthsamurai/matcho@0.3.10?type=jar",
        "pkg:maven/org.clojure/clojure@1.11.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/clojure@1.11.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/core.specs.alpha@0.2.62?type=jar",
        "pkg:maven/org.clojure/spec.alpha@0.3.218?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/spec.alpha@0.3.218?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/core.specs.alpha@0.2.62?type=jar"
    },
    {
      "ref": "pkg:maven/healthsamurai/matcho@0.3.10?type=jar"
    },
    {
      "ref": "pkg:maven/borkdude/edamame@1.3.22?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/tools.reader@1.3.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.reader@1.3.4?type=jar"
    },
    {
      "ref": "pkg:maven/net.java.dev.jna/jna@3.2.2?type=jar"
    },
    {
      "ref": "pkg:maven/zen-lang/zen-doc@0.0.1-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/cheshire/cheshire@5.11.0?type=jar",
        "pkg:maven/cli-matic/cli-matic@0.5.4?type=jar",
        "pkg:maven/clj-http/clj-http@3.12.3?type=jar",
        "pkg:maven/com.github.seancorfield/next.jdbc@1.3.834?type=jar",
        "pkg:maven/com.rpl/specter@1.1.4?type=jar",
        "pkg:maven/fipp/fipp@0.6.26?type=jar",
        "pkg:maven/http-kit/http-kit@2.6.0?type=jar",
        "pkg:maven/org.clojure/clojure@1.11.1?type=jar",
        "pkg:maven/org.clojure/data.csv@1.0.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
        "pkg:maven/org.xerial/sqlite-jdbc@3.39.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/cli-matic/cli-matic@0.5.4?type=jar",
      "dependsOn": [
        "pkg:maven/expound/expound@0.9.0?type=jar",
        "pkg:maven/org.clojure/tools.cli@1.0.206?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.cli@1.0.206?type=jar"
    },
    {
      "ref": "pkg:maven/expound/expound@0.9.0?type=jar"
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"
    },
    {
      "ref": "pkg:maven/fipp/fipp@0.6.26?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/core.rrb-vector@0.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/core.rrb-vector@0.1.2?type=jar"
    },
    {
      "ref": "pkg:maven/clj-http/clj-http@3.12.3?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.8.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.4?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
        "pkg:maven/potemkin/potemkin@0.4.5?type=jar",
        "pkg:maven/slingshot/slingshot@0.12.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient-cache@4.5.13?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.10?type=jar"
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar"
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.8.0?type=jar"
    },
    {
      "ref": "pkg:maven/potemkin/potemkin@0.4.5?type=jar",
      "dependsOn": [
        "pkg:maven/clj-tuple/clj-tuple@0.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/clj-tuple/clj-tuple@0.2.2?type=jar"
    },
    {
      "ref": "pkg:maven/org.clojure/data.csv@1.0.1?type=jar"
    },
    {
      "ref": "pkg:maven/com.github.seancorfield/next.jdbc@1.3.834?type=jar",
      "dependsOn": [
        "pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3?type=jar",
        "pkg:maven/org.clojure/java.data@1.0.95?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/java.data@1.0.95?type=jar",
      "dependsOn": [
        "pkg:maven/org.clojure/tools.logging@1.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.clojure/tools.logging@1.2.1?type=jar"
    },
    {
      "ref": "pkg:maven/cheshire/cheshire@5.11.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.13.3?type=jar",
        "pkg:maven/tigris/tigris@0.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.13.3?type=jar"
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.13.3?type=jar"
    },
    {
      "ref": "pkg:maven/org.xerial/sqlite-jdbc@3.39.3.0?type=jar"
    },
    {
      "ref": "pkg:maven/http-kit/http-kit@2.6.0?type=jar"
    },
    {
      "ref": "pkg:npm/react@18.2.0"
    },
    {
      "ref": "pkg:npm/react-dom@18.2.0",
      "dependsOn": [
        "pkg:npm/react@18.2.0"
      ]
    },
    {
      "ref": "pkg:npm/fuse.js@7.0.0"
    },
    {
      "ref": "pkg:npm/tailwind-merge@2.5.2"
    },
    {
      "ref": "pkg:npm/yaml@2.8.3"
    },
    {
      "ref": "pkg:npm/hs-ui@1.0.0",
      "dependsOn": [
        "pkg:npm/fuse.js@7.0.0",
        "pkg:npm/fuse.js@7.1.0",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-dom@18.3.1",
        "pkg:npm/react@18.2.0",
        "pkg:npm/react@18.3.1",
        "pkg:npm/tailwind-merge@2.5.2",
        "pkg:npm/tailwind-merge@2.6.0"
      ]
    },
    {
      "ref": "pkg:npm/process@0.11.10"
    },
    {
      "ref": "pkg:npm/zod@4.3.6"
    },
    {
      "ref": "pkg:npm/zod@3.25.76"
    },
    {
      "ref": "pkg:npm/react@19.2.5"
    },
    {
      "ref": "pkg:npm/js-yaml@4.1.1"
    },
    {
      "ref": "pkg:npm/fhirpath@4.9.1",
      "dependsOn": [
        "pkg:npm/js-yaml@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/clsx@1.2.1"
    },
    {
      "ref": "pkg:npm/@aidbox/box",
      "dependsOn": [
        "pkg:npm/fhirpath@4.9.1",
        "pkg:npm/fuse.js@7.0.0",
        "pkg:npm/hs-ui@1.0.0",
        "pkg:npm/js-yaml@4.1.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/zod@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/mydevbox@1.0.0"
    },
    {
      "ref": "pkg:npm/express@4.21.2"
    },
    {
      "ref": "pkg:npm/ajv@8.17.1"
    },
    {
      "ref": "pkg:npm/path@0.12.7",
      "dependsOn": [
        "pkg:npm/process@0.11.10"
      ]
    },
    {
      "ref": "pkg:npm/yaml@1.10.2"
    },
    {
      "ref": "pkg:npm/sql-on-fhir-v2@2.0.0",
      "dependsOn": [
        "pkg:npm/express@4.21.2"
      ]
    },
    {
      "ref": "pkg:npm/ajv@8.12.0"
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1"
    },
    {
      "ref": "pkg:npm/cors@2.8.5"
    },
    {
      "ref": "pkg:npm/fhirpath@3.9.0",
      "dependsOn": [
        "pkg:npm/js-yaml@3.14.1"
      ]
    },
    {
      "ref": "pkg:npm/sqlite3@5.1.7"
    },
    {
      "ref": "pkg:npm/sof@1.0.0",
      "dependsOn": [
        "pkg:npm/ajv@8.12.0",
        "pkg:npm/cors@2.8.5",
        "pkg:npm/express@4.21.2",
        "pkg:npm/fhirpath@3.9.0",
        "pkg:npm/sqlite3@5.1.7"
      ]
    },
    {
      "ref": "pkg:npm/sdc-tests-project@1.0.0"
    },
    {
      "ref": "pkg:npm/react@18.3.1"
    },
    {
      "ref": "pkg:npm/react-dom@18.3.1",
      "dependsOn": [
        "pkg:npm/react@18.3.1"
      ]
    },
    {
      "ref": "pkg:npm/fuse.js@7.1.0"
    },
    {
      "ref": "pkg:npm/tailwind-merge@2.6.0"
    },
    {
      "ref": "pkg:npm/yaml@2.9.0"
    },
    {
      "ref": "pkg:npm/url@0.11.4"
    },
    {
      "ref": "pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=0e9ab47da930c04b&upstream=ada",
      "dependsOn": [
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/alpine-baselayout@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=307598d85e573e0f",
      "dependsOn": [
        "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=1c56775a8069ec5f&upstream=alpine-baselayout",
        "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox"
      ]
    },
    {
      "ref": "pkg:apk/alpine/alpine-release@3.23.4-r0?arch=x86_64&distro=alpine-3.23.4&package-id=54eb61870e16b46d&upstream=alpine-base",
      "dependsOn": [
        "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=afad29d3ea43d3cb"
      ]
    },
    {
      "ref": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=c0f1d1dce995c0da",
      "dependsOn": [
        "pkg:apk/alpine/ca-certificates-bundle@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=97d3ed0e5d72a8bd&upstream=ca-certificates",
        "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=681babf4296d6ab0&upstream=apk-tools",
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=984a9e5869a7c52d&upstream=brotli",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox",
      "dependsOn": [
        "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=5b8a9495e4efe754"
      ]
    },
    {
      "ref": "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=5b8a9495e4efe754",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9616672525c3d5b0",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/ca-certificates@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a5d9eec75c31a8ba",
      "dependsOn": [
        "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox",
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/curl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=4d1c09eee735606c",
      "dependsOn": [
        "pkg:apk/alpine/libcurl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=cb62cf0637498cc6&upstream=curl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/gettext-envsubst@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=ba6b58fefc46fc30&upstream=gettext",
      "dependsOn": [
        "pkg:apk/alpine/libintl@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=d50b2f33e5f98df2&upstream=gettext",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/git@2.52.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=c9793ebf56e5aaa5",
      "dependsOn": [
        "pkg:apk/alpine/libcurl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=cb62cf0637498cc6&upstream=curl",
        "pkg:apk/alpine/libexpat@2.7.5-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9dda660b5cb543b5&upstream=expat",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/pcre2@10.47-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7bdf957aba3b7149",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/icu-data-en@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=fe9f6db80ee9337b&upstream=icu",
      "dependsOn": [
        "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox"
      ]
    },
    {
      "ref": "pkg:apk/alpine/icu-libs@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=f7505d582acd3e36&upstream=icu",
      "dependsOn": [
        "pkg:apk/alpine/icu-data-en@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=fe9f6db80ee9337b&upstream=icu",
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=681babf4296d6ab0&upstream=apk-tools",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libcurl@8.19.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=cb62cf0637498cc6&upstream=curl",
      "dependsOn": [
        "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=984a9e5869a7c52d&upstream=brotli",
        "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9616672525c3d5b0",
        "pkg:apk/alpine/ca-certificates-bundle@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=97d3ed0e5d72a8bd&upstream=ca-certificates",
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7b863e6ddaa3908e",
        "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=alpine-3.23.4&package-id=c496a24c00a9a2a3",
        "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8d6f32361002c027&upstream=nghttp2",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157",
        "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=alpine-3.23.4&package-id=4dbf173cf72694fb&upstream=zstd"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libedit@20251016.3.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=6e8818b9df6bb5c8",
      "dependsOn": [
        "pkg:apk/alpine/libncursesw@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a03eb9a8494c5da1&upstream=ncurses",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libexpat@2.7.5-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9dda660b5cb543b5&upstream=expat",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7b863e6ddaa3908e",
      "dependsOn": [
        "pkg:apk/alpine/libunistring@1.4.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=ecc8c9edc15da9d0",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libintl@0.24.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=d50b2f33e5f98df2&upstream=gettext",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libncursesw@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a03eb9a8494c5da1&upstream=ncurses",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/ncurses-terminfo-base@6.5_p20251123-r0?arch=x86_64&distro=alpine-3.23.4&package-id=3774e00a611ea8fe&upstream=ncurses"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=alpine-3.23.4&package-id=c496a24c00a9a2a3",
      "dependsOn": [
        "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7b863e6ddaa3908e",
        "pkg:apk/alpine/libunistring@1.4.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=ecc8c9edc15da9d0",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libsodium@1.0.20-r1?arch=x86_64&distro=alpine-3.23.4&package-id=1d25f994ca3ce6b4",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
      "dependsOn": [
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/libunistring@1.4.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=ecc8c9edc15da9d0",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/musl-utils@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=98b8f915867ab553&upstream=musl",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64&distro=alpine-3.23.4&package-id=0d9a599ad23d3b02&upstream=pax-utils"
      ]
    },
    {
      "ref": "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8d6f32361002c027&upstream=nghttp2",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=883749d828e3e29d",
      "dependsOn": [
        "pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=0e9ab47da930c04b&upstream=ada",
        "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=984a9e5869a7c52d&upstream=brotli",
        "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox",
        "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=9616672525c3d5b0",
        "pkg:apk/alpine/ca-certificates@20260413-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a5d9eec75c31a8ba",
        "pkg:apk/alpine/icu-libs@76.1-r1?arch=x86_64&distro=alpine-3.23.4&package-id=f7505d582acd3e36&upstream=icu",
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
        "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8d6f32361002c027&upstream=nghttp2",
        "pkg:apk/alpine/simdjson@3.12.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7c08d221f40db73a",
        "pkg:apk/alpine/simdutf@7.5.0-r1?arch=x86_64&distro=alpine-3.23.4&package-id=aa4b14ce965bc39c",
        "pkg:apk/alpine/sqlite-libs@3.51.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=96d62c90891a3dee&upstream=sqlite",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157",
        "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=alpine-3.23.4&package-id=4dbf173cf72694fb&upstream=zstd"
      ]
    },
    {
      "ref": "pkg:apk/alpine/npm@11.12.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a1562d5cd1ca42c3",
      "dependsOn": [
        "pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=883749d828e3e29d"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh-client-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=37dc0f95b32f4e0f&upstream=openssh",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libedit@20251016.3.1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=6e8818b9df6bb5c8",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh-client-default@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=b71447e05cacba06&upstream=openssh",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/openssh-client-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=37dc0f95b32f4e0f&upstream=openssh",
        "pkg:apk/alpine/openssh-keygen@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=25da3dd899eac182&upstream=openssh",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh-keygen@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=25da3dd899eac182&upstream=openssh",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=3069a01426f2d98f&upstream=openssh",
      "dependsOn": [
        "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=3e88c98a595f91bf&upstream=busybox",
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/openssh-keygen@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=25da3dd899eac182&upstream=openssh",
        "pkg:apk/alpine/openssh-server-common@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a3701027762893d2&upstream=openssh",
        "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh-sftp-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=1c6479d4c8fcd94a&upstream=openssh",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssh@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=48e3c6aba1dc51e9",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b",
        "pkg:apk/alpine/openssh-client-default@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=b71447e05cacba06&upstream=openssh",
        "pkg:apk/alpine/openssh-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=3069a01426f2d98f&upstream=openssh",
        "pkg:apk/alpine/openssh-sftp-server@10.2_p1-r0?arch=x86_64&distro=alpine-3.23.4&package-id=1c6479d4c8fcd94a&upstream=openssh"
      ]
    },
    {
      "ref": "pkg:apk/alpine/openssl@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=01cff82a8c1347b8",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/pcre2@10.47-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7bdf957aba3b7149",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64&distro=alpine-3.23.4&package-id=0d9a599ad23d3b02&upstream=pax-utils",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/simdjson@3.12.0-r0?arch=x86_64&distro=alpine-3.23.4&package-id=7c08d221f40db73a",
      "dependsOn": [
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/simdutf@7.5.0-r1?arch=x86_64&distro=alpine-3.23.4&package-id=aa4b14ce965bc39c",
      "dependsOn": [
        "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=bfa73c27129dc0da&upstream=gcc",
        "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64&distro=alpine-3.23.4&package-id=7e5ddced01633c47&upstream=gcc",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/sqlite-libs@3.51.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=96d62c90891a3dee&upstream=sqlite",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64&distro=alpine-3.23.4&package-id=70e62fc46b7f6a24&upstream=busybox",
      "dependsOn": [
        "pkg:apk/alpine/libcrypto3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=83488dfb37873b67&upstream=openssl",
        "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=8b0c3d22656f0a3b&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.6-r0?arch=x86_64&distro=alpine-3.23.4&package-id=997e381db1c605c0&upstream=openssl",
        "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.23.4&package-id=a14152594cef9c89&upstream=openssl",
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.23.4&package-id=dff34ba311b00157",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=alpine-3.23.4&package-id=4dbf173cf72694fb&upstream=zstd",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64&distro=alpine-3.23.4&package-id=7fd51e794b42703b"
      ]
    },
    {
      "ref": "Aidbox",
      "dependsOn": [
        "pkg:maven/borkdude/edamame@1.4.30?type=jar",
        "pkg:maven/bsless/clj-fast@0.0.11?type=jar",
        "pkg:maven/care.better.platform/web-template@4.2.0?type=jar",
        "pkg:maven/cheshire/cheshire@6.0.0?type=jar",
        "pkg:maven/clj-commons/clj-yaml@1.0.29?type=jar",
        "pkg:maven/clj-http/clj-http@3.13.0?type=jar",
        "pkg:maven/clj-pdf/clj-pdf@2.7.0?type=jar",
        "pkg:maven/clojure-elastic-apm/clojure-elastic-apm@0.13.1?type=jar",
        "pkg:maven/co.elastic.apm/apm-agent-api@1.54.0?type=jar",
        "pkg:maven/com.apollographql.federation/federation-graphql-java-support@5.5.0?type=jar",
        "pkg:maven/com.appsflyer/pronto@3.0.0?type=jar",
        "pkg:maven/com.azure/azure-identity@1.18.1?type=jar",
        "pkg:maven/com.azure/azure-storage-blob@12.35.0?type=jar",
        "pkg:maven/com.cognitect/transit-clj@1.0.333?type=jar",
        "pkg:maven/com.cronutils/cron-utils@9.2.1?type=jar",
        "pkg:maven/com.draines/postal@2.0.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.7.1?type=jar",
        "pkg:maven/com.github.seancorfield/next.jdbc@1.3.1048?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-pubsub@1.140.1?type=jar",
        "pkg:maven/com.google.cloud/google-cloud-storage@2.58.1?type=jar",
        "pkg:maven/com.goterl/lazysodium-java@5.2.0?type=jar",
        "pkg:maven/com.graphql-java/graphql-java@24.3?type=jar",
        "pkg:maven/com.helger.schematron/ph-schematron-xslt@8.0.6?type=jar",
        "pkg:maven/com.rpl/specter@1.1.4?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.5?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.5?type=jar",
        "pkg:maven/com.velisco/clj-ftp@1.2.0?type=jar",
        "pkg:maven/com.widdindustries/cljc.java-time@0.1.21?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/crypto-password/crypto-password@0.3.0?type=jar",
        "pkg:maven/dev.weavejester/medley@1.8.1?type=jar",
        "pkg:maven/funcool/cuerdas@2023.11.09-407?type=jar",
        "pkg:maven/funcool/promesa@11.0.678?type=jar",
        "pkg:maven/garden/garden@1.3.10?type=jar",
        "pkg:maven/hawk/hawk@0.2.11?type=jar",
        "pkg:maven/hiccup/hiccup@2.0.0?type=jar",
        "pkg:maven/honeysql/honeysql@1.0.461?type=jar",
        "pkg:maven/http-kit/http-kit@2.9.0-beta2?type=jar",
        "pkg:maven/io.airlift/aircompressor@2.0.3?type=jar",
        "pkg:maven/io.forward/yaml@1.0.11?type=jar",
        "pkg:maven/io.healthsamurai.aidbox/api@0.0.13?type=jar",
        "pkg:maven/io.opentelemetry.proto/opentelemetry-proto@1.3.2-alpha?type=jar",
        "pkg:maven/juji/editscript@0.6.6?type=jar",
        "pkg:maven/markdown-clj/markdown-clj@1.12.4?type=jar",
        "pkg:maven/metosin/jsonista@0.3.13?type=jar",
        "pkg:maven/nano-id/nano-id@1.1.0?type=jar",
        "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.11.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.2?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar",
        "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar",
        "pkg:maven/org.babashka/sci@0.10.46?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar",
        "pkg:maven/org.clj-commons/clj-ssh@0.6.6?type=jar",
        "pkg:maven/org.clojure/clojure@1.12.0?type=jar",
        "pkg:maven/org.clojure/core.async@1.9.808-alpha1?type=jar",
        "pkg:maven/org.clojure/core.match@1.1.0?type=jar",
        "pkg:maven/org.clojure/data.csv@1.1.0?type=jar",
        "pkg:maven/org.clojure/data.priority-map@1.2.0?type=jar",
        "pkg:maven/org.clojure/data.xml@0.2.0-alpha9?type=jar",
        "pkg:maven/org.clojure/java.jdbc@0.7.12?type=jar",
        "pkg:maven/org.clojure/spec.alpha@0.6.249?type=jar",
        "pkg:maven/org.clojure/tools.reader@1.5.2?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.8?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/opt-1.4@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/serialisation@2.25.0?type=jar",
        "pkg:maven/org.ehrbase.openehr.sdk/web-template@2.25.0?type=jar",
        "pkg:maven/org.flatland/ordered@1.15.12?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-nop@2.1.0-alpha1?type=jar",
        "pkg:maven/pandect/pandect@1.0.2?type=jar",
        "pkg:maven/rewrite-clj/rewrite-clj@1.2.50?type=jar",
        "pkg:maven/ring/ring-defaults@0.6.0?type=jar",
        "pkg:maven/ring/ring@1.15.3?type=jar",
        "pkg:maven/selmer/selmer@1.12.62?type=jar",
        "pkg:maven/software.amazon.awssdk/auth@2.44.9?type=jar",
        "pkg:maven/software.amazon.awssdk/s3@2.44.9?type=jar",
        "pkg:maven/superlifter/superlifter@0.1.5?type=jar",
        "pkg:maven/taipei.404/html-to-hiccup@0.1.8?type=jar"
      ]
    }
  ],
  "compositions": [
    {
      "aggregate": "incomplete",
      "bom-ref": "pkg:npm/@aidbox/box"
    }
  ]
}
