{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:849b99d4-5cc6-4995-aa84-d2e44441637f","version":1,"metadata":{"timestamp":"2026-10-05T15:53:52Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"name":"pulumi-xenorchestra","group":"@vates","version":"1.3.3","description":"A Pulumi package for creating and managing Xen Orchestra cloud resources.","purl":"pkg:npm/%40vates/pulumi-xenorchestra@1.3.3","bom-ref":"pkg:npm/@vates/pulumi-xenorchestra@1.3.3","properties":[{"name":"cdx:npm:scripts","value":"build"},{"name":"cdx:npm:buildScripts","value":"build"},{"name":"cdx:license:category","value":"Permissive"}],"type":"application","licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"externalReferences":[{"type":"website","url":"https://www.pulumi.com"}]},"properties":[{"name":"cdx:bom:componentTypes","value":"npm"},{"name":"cdx:bom:componentNamespaces","value":"@gar\\n@grpc\\n@isaacs\\n@js-sdsl\\n@logdna\\n@npmcli\\n@opentelemetry\\n@protobufjs\\n@pulumi\\n@sigstore\\n@tufjs\\n@types"},{"name":"cdx:bom:componentSrcFiles","value":"sdk/nodejs/package-lock.json"}]},"components":[{"group":"@pulumi","name":"pulumi","version":"3.267.0","scope":"required","hashes":[{"alg":"SHA-512","content":"75dfcadecc6a34aaa2600bdc835e13b442fb658a92ca984c40cbaa0de66fa285fb8c829a6b4b7a41e3419eee8a7b21f86ea2aa3739ad6b4edafed826524c3cff"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40pulumi/pulumi@3.267.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@pulumi/pulumi/-/pulumi-3.267.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@pulumi/pulumi@3.267.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@pulumi/pulumi/-/pulumi-3.267.0.tgz"},{"name":"ImportedModules","value":"@pulumi/pulumi,@pulumi/pulumi/runtime"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}],"occurrences":[{"location":"config/vars.ts","line":4},{"location":"getHost.ts","line":4},{"location":"getHost.ts","line":24},{"location":"getHost.ts","line":95},{"location":"getHosts.ts","line":4},{"location":"getHosts.ts","line":15},{"location":"getHosts.ts","line":85},{"location":"getNetwork.ts","line":4},{"location":"getNetwork.ts","line":26},{"location":"getNetwork.ts","line":92},{"location":"getPif.ts","line":4},{"location":"getPif.ts","line":27},{"location":"getPif.ts","line":114},{"location":"getPool.ts","line":4},{"location":"getPool.ts","line":28},{"location":"getPool.ts","line":90},{"location":"getResourceSet.ts","line":4},{"location":"getResourceSet.ts","line":22},{"location":"getResourceSet.ts","line":66},{"location":"getSr.ts","line":4},{"location":"getSr.ts","line":28},{"location":"getSr.ts","line":120},{"location":"getTemplate.ts","line":4},{"location":"getTemplate.ts","line":24},{"location":"getTemplate.ts","line":83},{"location":"getUser.ts","line":4},{"location":"getUser.ts","line":24},{"location":"getUser.ts","line":79},{"location":"getVdi.ts","line":4},{"location":"getVdi.ts","line":14},{"location":"getVdi.ts","line":77},{"location":"getVms.ts","line":4},{"location":"getVms.ts","line":15},{"location":"getVms.ts","line":66},{"location":"getXoaHost.ts","line":4},{"location":"getXoaHost.ts","line":22},{"location":"getXoaHost.ts","line":91},{"location":"getXoaHosts.ts","line":4},{"location":"getXoaHosts.ts","line":13},{"location":"getXoaHosts.ts","line":81},{"location":"getXoaNetwork.ts","line":4},{"location":"getXoaNetwork.ts","line":24},{"location":"getXoaNetwork.ts","line":88},{"location":"getXoaPif.ts","line":4},{"location":"getXoaPif.ts","line":25},{"location":"getXoaPif.ts","line":110},{"location":"getXoaPool.ts","line":4},{"location":"getXoaPool.ts","line":26},{"location":"getXoaPool.ts","line":86},{"location":"getXoaResourceSet.ts","line":4},{"location":"getXoaResourceSet.ts","line":20},{"location":"getXoaResourceSet.ts","line":62},{"location":"getXoaStorageRepository.ts","line":4},{"location":"getXoaStorageRepository.ts","line":26},{"location":"getXoaStorageRepository.ts","line":116},{"location":"getXoaTemplate.ts","line":4},{"location":"getXoaTemplate.ts","line":22},{"location":"getXoaTemplate.ts","line":79},{"location":"getXoaUser.ts","line":4},{"location":"getXoaUser.ts","line":22},{"location":"getXoaUser.ts","line":75},{"location":"getXoaVdi.ts","line":4},{"location":"getXoaVdi.ts","line":12},{"location":"getXoaVdi.ts","line":73},{"location":"getXoaVms.ts","line":4},{"location":"getXoaVms.ts","line":13},{"location":"getXoaVms.ts","line":62},{"location":"provider.ts","line":4},{"location":"provider.ts","line":69},{"location":"provider.ts","line":77},{"location":"utilities.ts","line":6},{"location":"utilities.ts","line":5},{"location":"utilities.ts","line":77}]}},{"group":"","name":"typescript","version":"4.9.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"d455e4f44d879be433650ef3f8c7098872f8356d45d84cccbbd36af62df301a1aa89b69fa98c02554e96c9602ec90451cce971a2ef31652c972c437ca0a8f6e2"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/typescript@4.9.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz"}],"type":"library","bom-ref":"pkg:npm/typescript@4.9.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"cdx:npm:package:development","value":"true"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/tsc, /app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/tsserver"},{"name":"cdx:npm:bin","value":"tsc, tsserver"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@grpc","name":"grpc-js","version":"1.14.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"ed564cf9255d11c514a9241e348df333c42cfc18502999dd3e8da1e5591890033c233d302486bc98a5797a4406a86f1452c9e443434cc48c709081d8be3d2a3b"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40grpc/grpc-js@1.14.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.5.tgz"}],"type":"library","bom-ref":"pkg:npm/@grpc/grpc-js@1.14.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.5.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@grpc","name":"proto-loader","version":"0.8.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"c2d17a87e0d8e8cdd868304f026beeb80ea357c4a27fd323b4e2397ae2855918020e5e4f783a4fb0747dbb697a4ade5c798f00660a0d0f0c39f87bc4b1716c1a"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40grpc/proto-loader@0.8.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.8.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@grpc/proto-loader@0.8.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.8.1.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/proto-loader-gen-types"},{"name":"cdx:npm:bin","value":"proto-loader-gen-types"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"lodash.camelcase","version":"4.3.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"4f0b849c29f16dcdeb02f85ffcb6c6eed2540f386a5f2167bf776dccb38f8021bf84e0cbed6167b1bc24b640fbc9457446bade3ff9753c02eafd84a0e95be394"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/lodash.camelcase@4.3.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"}],"type":"library","bom-ref":"pkg:npm/lodash.camelcase@4.3.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"long","version":"5.3.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"98d0206751a6c8d843ec0baa9d31b7fd5436ea8efad3e65804f2a33efba03bcfa72db61f5fa4d5a493ec781be8a5b758faaa59fe52949e611cd4b799612dd000"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/long@5.3.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/long/-/long-5.3.2.tgz"}],"type":"library","bom-ref":"pkg:npm/long@5.3.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/long/-/long-5.3.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"protobufjs","version":"7.6.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"7580d67634a5e5135bed280fc4641c454f86b6f3fbb367e992b634af8df63dc388699d3fac17311199d037aee226116e422570ef9e090e83ebb8f08d746b1b8e"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/protobufjs@7.6.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.6.tgz"}],"type":"library","bom-ref":"pkg:npm/protobufjs@7.6.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.6.tgz"},{"name":"cdx:npm:hasInstallScript","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@protobufjs","name":"aspromise","version":"1.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"8fe80a13112e2e62b0bf3dce811397b6b276506db1f028766195316a187eb351761d9fb001c79434b92fcbacca08f551914fbe65642b771b147905e6720e2ea1"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/aspromise@1.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/aspromise@1.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"base64","version":"1.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"01991c000e6f9cdfefe0f0ea2b2311e65c7b859b6d3c380296ff3713ffc530d851d9331c2d485f4540470a64a5d288bdccc8030ea4542644b13b7c26f39f972e"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/base64@1.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/base64@1.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"codegen","version":"2.0.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"ce05c52f35b7029df77ba7745a58f8306226e827bc3bcf67fdaa54686341fe3c7e870fabb96129ec4c0652c85d2ca5510b1656d767e9f6be34135990adfff7e2"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/codegen@2.0.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/codegen@2.0.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"eventemitter","version":"1.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"bd6d469b03193672fe80c45aa2f961f72657ef891cf934d4dc539b924baba4c691b417cb3f795d8d2f4a416970660ada444d3e76178412803177370943c79766"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/eventemitter@1.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.1.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/eventemitter@1.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"fetch","version":"1.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"1a9a6d2ebb39eda74c4ae1e2dd5363d26005f1dc21dfa2cc69817a5f227a24c5a556c73eb78dad9b51d210398eb3703c7c2f72c9e8ac80b86c4d542890e674cf"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/fetch@1.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.1.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/fetch@1.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"float","version":"1.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"0dd6fe9155e55ecb7d77e47d3df4c8c61d4474d920a117b9b4e5fab74d5fd656163af26748f0c1946db8d502f37323dda0d4ec6e52d476e8c6484e11ceb4d919"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/float@1.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/float@1.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"path","version":"1.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"e8939c2794e6d3c74e1c06dd4771abbcffb25147e48c6e5e3ec1d87333052eadd998c9000fdf1c0e0713da2035949f4d57015de2d1ff8924a87b8e185a496d10"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/path@1.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/path@1.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"pool","version":"1.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"d2410b6864880c12af7204b8ce48f3d4f79d75ab6b8d87263163a502e00fc0079c714acf1dd52aa3f27a2e2ca61c7122253e4dac5d54570c58d787fe7f2e1643"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/pool@1.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/pool@1.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@protobufjs","name":"utf8","version":"1.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"6f5510c1c119e320a73020fc0c02f55656ef04913dfc85f8153229ec11b5c58a5fdbd48b6b32d2aea5248f8c3b639cbb70254fe84e6d72aa9c234c5e98f907ba"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40protobufjs/utf8@1.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.2.tgz"}],"type":"framework","bom-ref":"pkg:npm/@protobufjs/utf8@1.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["framework"]},{"group":"@types","name":"node","version":"26.6.4","scope":"excluded","hashes":[{"alg":"SHA-512","content":"95d54f0c2ce3edfb1a199acb07436e1ee4ef25cb0d6accac040a8ca25aff720c6b2ddd716eac48af75c988f9c71c9502c63e6c345d6f9d18fd6969eb561e4972"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40types/node@26.6.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@types/node/-/node-26.6.4.tgz"}],"type":"library","bom-ref":"pkg:npm/@types/node@26.6.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@types/node/-/node-26.6.4.tgz"},{"name":"LocalNodeModulesPath","value":"node_modules/protobufjs/node_modules/@types/node"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"undici-types","version":"8.9.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"2930f2453617f2c5a629702290f1c74b273adc244f11331cb728ca16ea5c0ba3812d74f7c6c3747bd685ee6fa6217bad156a545ee79db68c06ee22cece9d2442"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/undici-types@8.9.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz"}],"type":"library","bom-ref":"pkg:npm/undici-types@8.9.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"yargs","version":"17.7.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"199b63c66fc9ff84d2c6e2f714d6230a62e4b414e7230feb56629223229e6006699890768a0f556ae082e71b1af3618d29528302aa4e9f7295ccdb74ce6ad4d2"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/yargs@17.7.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/yargs/-/yargs-17.7.3.tgz"}],"type":"library","bom-ref":"pkg:npm/yargs@17.7.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/yargs/-/yargs-17.7.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"cliui","version":"8.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"05278d9f2bacef90b8fff350f6042dd7f72c4d7ca8ffc49bf9a7cb024cc0a6d16e32ca1df4716890636e759a62fe8415ef786754afac47ee4f55131df83afb61"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cliui@8.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/cliui@8.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"string-width","version":"4.2.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/string-width@4.2.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"}],"type":"library","bom-ref":"pkg:npm/string-width@4.2.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"emoji-regex","version":"8.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/emoji-regex@8.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/emoji-regex@8.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"is-fullwidth-code-point","version":"3.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/is-fullwidth-code-point@3.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/is-fullwidth-code-point@3.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"strip-ansi","version":"6.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/strip-ansi@6.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/strip-ansi@6.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ansi-regex","version":"5.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ansi-regex@5.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/ansi-regex@5.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"wrap-ansi","version":"7.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/wrap-ansi@7.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/wrap-ansi@7.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ansi-styles","version":"4.3.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ansi-styles@4.3.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"}],"type":"library","bom-ref":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"color-convert","version":"2.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/color-convert@2.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/color-convert@2.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"color-name","version":"1.1.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"}],"type":"library","bom-ref":"pkg:npm/color-name@1.1.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"escalade","version":"3.2.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"5948f6aa5c5a42d3b883a3eae5cdbd193716183c9df22b4bf334e58a98040b3dc97ac02288e2a8b5df0953aa2d0773c00a01bac64254c9585ba0c4be6e37bf8c"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/escalade@3.2.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz"}],"type":"library","bom-ref":"pkg:npm/escalade@3.2.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"get-caller-file","version":"2.0.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/get-caller-file@2.0.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"}],"type":"library","bom-ref":"pkg:npm/get-caller-file@2.0.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"require-directory","version":"2.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"7c6c4423bfb0b06f71aef763b2b9662f6d8e3134e21d1c0032ba2211e320abc833a0b0bf3d0afb46c4434932d483f6d9019b45f9354890773aff84482abba2f9"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/require-directory@2.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/require-directory@2.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"y18n","version":"5.0.8","scope":"optional","hashes":[{"alg":"SHA-512","content":"d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/y18n@5.0.8","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"}],"type":"library","bom-ref":"pkg:npm/y18n@5.0.8","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"yargs-parser","version":"21.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"b55a6c256ec376379c0221696c80757b7ab1210b04e8da0f739fde4ddadb6c80b88742d5b16867a1ade0fa6d87725048ba31f3b31678549540f8652e736fcb07"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/yargs-parser@21.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/yargs-parser@21.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["parse"]},{"group":"@js-sdsl","name":"ordered-map","version":"4.4.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"8942a09b9d93f07384fe66a44b18eaa1685ef79649035fc6d6c62c19ebf6243294492d78280820d4b1dbf816be20fa30d317e56e74a43ac65c3b4f02ef0d6063"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40js-sdsl/ordered-map@4.4.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@js-sdsl/ordered-map@4.4.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@logdna","name":"tail-file","version":"2.2.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"5c64ac583c1e3fcd0592cd7a970900508af9e080b206ce8fb08e26a5f4cb41a5a010946d63dc4457e3dec83a49fac244199c6a20d969980c1effab52d693fc36"}],"licenses":[{"license":{"name":"SEE LICENSE IN LICENSE","properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40logdna/tail-file@2.2.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@logdna/tail-file/-/tail-file-2.2.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@logdna/tail-file@2.2.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@logdna/tail-file/-/tail-file-2.2.0.tgz"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"arborist","version":"9.9.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"37c15616064f46d90161486b1176a063d003946ca58108161f0d72c251d15c4f08a1ba851fe4402b628bd9ab7960cdf75c51692037a80e1ea727edd9a81fec41"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/arborist@9.9.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.9.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/arborist@9.9.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.9.2.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/arborist"},{"name":"cdx:npm:bin","value":"arborist"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@gar","name":"promise-retry","version":"1.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"1a6cc0f5c90da243f2a53835d298297873507bba61fa220a2a684abb739bf40364b30ade0b1ed1ddc2a663bf352bc40adc0a952f7c5587d038d89bc801b92448"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40gar/promise-retry@1.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/@gar/promise-retry@1.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@isaacs","name":"string-locale-compare","version":"1.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"490ecace187df83f995bd300d33918bf75578480cdc7e2f333a109fbfeb9237418f9e9d4e88b6d7bb1395d7ec45aba8b5b614de27d3a196cc19cfa02ded87669"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40isaacs/string-locale-compare@1.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@isaacs/string-locale-compare@1.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"fs","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"eceb02d6034e44111ac0e6b9fa3da95cdf6fb2271a20e1f970f5f1a11e9f24e987ebf117a4907609a8d73aed5f3d116e9f69b5964b44157d75f8ff3d86a3bfa2"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/fs@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/fs/-/fs-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/fs@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/fs/-/fs-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"semver","version":"7.8.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"63bfca0ec6fc2e3a28669c1aa86cae94ee8342592c8029dc7211c693eb19218e1206f52870c044147e54af57c8e1d57e26f974c3a723bee71a222e34a6e462a0"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/semver@7.8.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/semver/-/semver-7.8.5.tgz"}],"type":"library","bom-ref":"pkg:npm/semver@7.8.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/semver/-/semver-7.8.5.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/semver"},{"name":"cdx:npm:bin","value":"semver"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"installed-package-contents","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"c8dc8076407107bda0b59e06af05c233465479da3d9c86ce30a7c68ede82bba0d77f4a7ccb53d589900a0c2f2af24bff7ee7f1d164e3441752972aef9cfee198"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/installed-package-contents@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/installed-package-contents/-/installed-package-contents-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/installed-package-contents@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/installed-package-contents/-/installed-package-contents-4.0.0.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/installed-package-contents"},{"name":"cdx:npm:bin","value":"installed-package-contents"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-bundled","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"24b4a96f387a5145c8128a8fb1806f54d566cab8d56757f31056eac4a91325091604edf1173153f8a0e748a416c0e40d6ee591c2de4b483e873932c6216cdfaf"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-bundled@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-bundled/-/npm-bundled-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-bundled@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-bundled/-/npm-bundled-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-normalize-package-bin","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"0898b7392e092ec34c9abdaed3b38996172b3f109e39e3ffe31abaeda58d6a2e9335659b4eb94d0e097c35c14a5657012a9d7c18f8fe1336cd220ac17d986c6a"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-normalize-package-bin@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-normalize-package-bin@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"map-workspaces","version":"5.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"a3682bb2c5e8d5eefbe04e4eb44c30ae0a2ccd8461d25aa4247f8f6fdafbf1472a7462510d17e1a4cf03bd93e3ccd2cb358783feb35b8ce28cdd2b395000513b"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/map-workspaces@5.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-5.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/map-workspaces@5.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-5.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"name-from-folder","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"a9fae1565392aa628cf22eab90d759cc0063f0c284213185018fb8b5ea81ce292c09000e2eeb62031335c18d8128477c2a3512a56996098c6f5ebd32e154e53e"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/name-from-folder@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/name-from-folder/-/name-from-folder-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/name-from-folder@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/name-from-folder/-/name-from-folder-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"package-json","version":"7.0.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"895b93946dce46ada26956b521653100efe3229efbb54281868323bb3616da42f830b3756e2fe87ea919ec3ece3b087c728031d7f4b681ed2b31d1aff2c2d239"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/package-json@7.0.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/package-json/-/package-json-7.0.5.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/package-json@7.0.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/package-json/-/package-json-7.0.5.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"git","version":"7.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"a1ea251c38c4c4d0090279583f6ab3363317fd78bd6e6bbbf02f5d206af8c63a1bad229bb8c602a61f254f39f8be75b736322a566c3f7fc0427e8baac895e546"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/git@7.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/git/-/git-7.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/git@7.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/git/-/git-7.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"promise-spawn","version":"9.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"38b51aa2a06ecb1793a94be30371591625d47d80b56a5a7749af7d816dc4503cf7b59dc26d70dd719eea58a07389cac995e220b9ca166a6587d6c680987fe5d9"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/promise-spawn@9.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-9.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/promise-spawn@9.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-9.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"which","version":"6.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"a062dee3a308ac246a5fbcad3d47fae84018bdd78c219627dd66a872aa8a640c6b06992a1df2ffaaf4f227f6d3939f80a870a35e6aefdc2116832dfaf3385152"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/which@6.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/which/-/which-6.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/which@6.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/which/-/which-6.0.1.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/node-which"},{"name":"cdx:npm:bin","value":"node-which"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"isexe","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"14552d64ca6867c46a1d2dd77971261d62c0e2d847f99c42bf694e88f227d5773b0b1aea856ccd483cc3fbf7214bfcdb61ece68b058b7500b4f497502a6b613b"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/isexe@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/isexe/-/isexe-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/isexe@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/isexe/-/isexe-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ini","version":"6.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"2014dd224cd934ea6a9bbab7751a89bcc6a57578c31d69040dfaf0184413b3979a40c595f9d8c0851fb06a1c8d34c01afaaa5b0d4841315b7864a370a4f9bbc5"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ini@6.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ini/-/ini-6.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/ini@6.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ini/-/ini-6.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"lru-cache","version":"11.5.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"53837c160ce65b173c935547f0aafa950835f14ec58ef6f2eb05c75515ff659ec8c166d1320ad16cfd16adbe6ae4d5629ebca9e1241a9a91ca76fb5e708b7152"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/lru-cache@11.5.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz"}],"type":"library","bom-ref":"pkg:npm/lru-cache@11.5.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-pick-manifest","version":"11.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"6eecf209f7a8198fcfc4aaa606a9f521426b667522d555494dd49244f188eb4b49754854a1240586cd33c9c26890374ece741e9ed82ba5ff0b6b2107cb2625a9"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-pick-manifest@11.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-pick-manifest/-/npm-pick-manifest-11.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-pick-manifest@11.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-pick-manifest/-/npm-pick-manifest-11.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-install-checks","version":"8.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"49c01474ca72ce46e9c6835e910ded35174523c489f3ac2029949065d5314fe6e3d30545a6c10c5a79173f4b7055ed60272345e5aa415832618486e0ac856244"}],"licenses":[{"license":{"id":"BSD-2-Clause","url":"https://opensource.org/licenses/BSD-2-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-install-checks@8.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-install-checks/-/npm-install-checks-8.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-install-checks@8.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-install-checks/-/npm-install-checks-8.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-package-arg","version":"13.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"21c882137498dee13ce0b77c599536de000f3d5f6b218a1de05fab73ebc9ee1edcc0026df5593a4d5b0aeb4af2ed48f74914b76ea451206b93a7d615964e9634"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-package-arg@13.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-13.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-package-arg@13.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-13.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"hosted-git-info","version":"9.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"1dcfa084ba12b7a41a61952fd1606222f98c0d9b9967ba1a0ef747f0c6df38ee253acc5d5cb12fb82e9e3e81acf47d57f6808bcaaebe35537430aa83fb2771ca"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/hosted-git-info@9.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-9.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/hosted-git-info@9.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-9.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"proc-log","version":"6.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"886f866257517f6050d140d401de8943f470cda432ea65e6b24fc8ce56326a5e00e12345c39e0c787e3fb4b905e08e56a161bd490c2ea96cd2f7d8da1501c1b9"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/proc-log@6.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/proc-log@6.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"validate-npm-package-name","version":"7.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"8550c8070b11aee4fbdcf6caeee3f979b52df9ecc4b429b3673dc5e7d052af617a39516727fea1f258aebdd2eb43cf179a793affec461aeabea46f56c13bb2dc"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/validate-npm-package-name@7.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-7.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/validate-npm-package-name@7.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-7.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"glob","version":"13.0.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"5a3972ae89669bcb83a66fe8806c976576f567e09ad81f0d6c9c2a0558346b12bd19b05ea12ef2195eaf8d79d87469ba5f9de27a112ec716f288aa7c42637857"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/glob@13.0.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/glob/-/glob-13.0.6.tgz"}],"type":"library","bom-ref":"pkg:npm/glob@13.0.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/glob/-/glob-13.0.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minimatch","version":"10.2.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"be92d012cf952c2af59d4d015d2d3b99a628170943007d209e042ebadb71230bad0c510c1ead9b957fbcbe98310dd2b72753f08c22627a9efb3a2b536782e5d4"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minimatch@10.2.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz"}],"type":"library","bom-ref":"pkg:npm/minimatch@10.2.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"brace-expansion","version":"5.0.12","scope":"optional","hashes":[{"alg":"SHA-512","content":"628bd0debce168b308ac38cd0cc90d4b4d6d79af77aa11211b9c72f1febe47497e770dca8bee6c0a822823de368ae2d94c75a881692d830543854d3d88d12299"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/brace-expansion@5.0.12","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz"}],"type":"library","bom-ref":"pkg:npm/brace-expansion@5.0.12","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"balanced-match","version":"4.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/balanced-match@4.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/balanced-match@4.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass","version":"7.1.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"b44047a839c8a0cff5ad7304d738246bd83a43695ca029311cbb9cece0c9e41c5b3f977873667970682d5c092ee7ddb4d02c7b762b874ce61f4810fc9fa9a6f0"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass@7.1.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass@7.1.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"path-scurry","version":"2.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"dcefe2555b0900fb0e9e9c1621e0fe77acffecf9aa029c9078f52d0a77636ad8fff48e4bca51efb79aa5b856814f7239877af57a37d1d39e9cf850aff8d9cd5e"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/path-scurry@2.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/path-scurry@2.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"json-parse-even-better-errors","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"645d67c59dbc561428b915a151c565508377ab04a03eeb302b4e6cfc721aa1eb40a04ffdb678159821e34b199240f6afd6777e94fb532f4619ff6005751fe261"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/json-parse-even-better-errors@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/json-parse-even-better-errors@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"spdx-expression-parse","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"0a5c9ae492228ffec2e9b451db6fad9c65db73854a9626ca4958f6887bd5797e62316eecd5221096abbaf7d26438324922187fa54bbc2f4fd52e1f317e50fe2d"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/spdx-expression-parse@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/spdx-expression-parse@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"spdx-exceptions","version":"2.5.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3"}],"licenses":[{"license":{"id":"CC-BY-3.0","url":"https://opensource.org/licenses/CC-BY-3.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/spdx-exceptions@2.5.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz"}],"type":"library","bom-ref":"pkg:npm/spdx-exceptions@2.5.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"spdx-license-ids","version":"3.0.24","scope":"optional","hashes":[{"alg":"SHA-512","content":"70b4bd4ed5a42101722e4277ff968540038739229394eb3fed60eeb7f5cf49d8e89b57c98547647a978900a5daf58d39f8569b1ddd2cb62f84b79e7dbc3b64a5"}],"licenses":[{"license":{"id":"CC0-1.0","url":"https://opensource.org/licenses/CC0-1.0","properties":[{"name":"cdx:license:category","value":"Public Domain"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/spdx-license-ids@3.0.24","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.24.tgz"}],"type":"library","bom-ref":"pkg:npm/spdx-license-ids@3.0.24","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.24.tgz"},{"name":"cdx:license:category","value":"Public Domain"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"metavuln-calculator","version":"9.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"f7818b49884b5c5dadd8b002ee90f02da338b82011cf14a1c8040ab22ae694d72989d1fcf55038ffe2b52db26644c833e60cbae44fd0041590754bc62ded85ae"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/metavuln-calculator@9.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/metavuln-calculator/-/metavuln-calculator-9.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/metavuln-calculator@9.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/metavuln-calculator/-/metavuln-calculator-9.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"cacache","version":"20.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"3372da6fc34f625654d9ec6c2f76cc56f32b32a8300a73167dd65b2b6f1b9f7a4ae803d3fd37bf23c86344f36ed6ec0e458f5ad5e110a227d76ca3d031f31338"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cacache@20.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cacache/-/cacache-20.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/cacache@20.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cacache/-/cacache-20.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"fs-minipass","version":"3.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"5d4040f570a51db9c95927c1ce3926e91bcfb32837b2bc99b74e81110a17705ec42bfc6919a41826040a0c94941f948667be98ee9171d500675f3d3dad4e456f"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/fs-minipass@3.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/fs-minipass/-/fs-minipass-3.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/fs-minipass@3.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/fs-minipass/-/fs-minipass-3.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass-collect","version":"2.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"0fb57c3cef686b3ecf5862db0800ae235a843acabb50a7cba2dc7f0b401eb78ddf09407fc1f43b0d87aada847fb2f1491980c73ebdfc48701379a8ff6682872b"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass-collect@2.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass-collect/-/minipass-collect-2.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass-collect@2.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass-collect/-/minipass-collect-2.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass-flush","version":"1.0.7","scope":"optional","hashes":[{"alg":"SHA-512","content":"4dba93cfd714c16c874b60f2f3d3f7a1c006506c4a8e32ee47dcfcc385944c60158048f5effe27860a360eee7a8b4166dcf9b7d20e2203c2dca9cb5cefa8c2cc"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass-flush@1.0.7","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.7.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass-flush@1.0.7","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.7.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass","version":"3.3.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass@3.3.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"yallist","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/yallist@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass-pipeline","version":"1.2.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"c6e22aedc20eb74f513d1275f60762e1bf9188dbc31587b9247fa080dbc1a86aa941772bbb73dc466399b8704a58ad53c5ff7e710f8731537877acf8e8b64fec"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass-pipeline@1.2.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass-pipeline@1.2.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"p-map","version":"7.0.8","scope":"optional","hashes":[{"alg":"SHA-512","content":"322b5a56c0ae08522f38b2cf214ecd9dfad9bd2f47f61ee4c0c5240e8f93da910849a243e3c215f52f2221d5c1ecfb2fbddc7261cb124d3aebf745cab1bba537"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/p-map@7.0.8","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/p-map/-/p-map-7.0.8.tgz"}],"type":"library","bom-ref":"pkg:npm/p-map@7.0.8","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/p-map/-/p-map-7.0.8.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ssri","version":"13.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"4148917f5faef703d32ffefa1936252adb43101595d606bd6575bc046ea47dd7b2c8cf0b18f8b1f6044eca0f55dbe3f4c4dc85dd7d86a39dbac4a15d319ac749"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ssri@13.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ssri/-/ssri-13.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/ssri@13.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ssri/-/ssri-13.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"pacote","version":"21.5.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"2af709f62cb772bcac0ac82a738f8f9271ffc3a8e4ae9f09377ea6a5904fc0d6834704df3190f7ed8cd16b336cb626543a1b85e699e8f5fefc9fd9842416afc2"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/pacote@21.5.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/pacote/-/pacote-21.5.1.tgz"}],"type":"library","bom-ref":"pkg:npm/pacote@21.5.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/pacote/-/pacote-21.5.1.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/pacote"},{"name":"cdx:npm:bin","value":"pacote"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"run-script","version":"10.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"986516af5b8c9dfd257b64f07ce658e121716465c67e6e09b5acbf9f001ad852cd00a5d4a14c1a1b004c347dfa5073ed8a759f4d22779ea150af4d3dd42c551a"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/run-script@10.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/run-script/-/run-script-10.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/run-script@10.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/run-script/-/run-script-10.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"node-gyp","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"bae1b91d91572dfc852aa83c432a6c9a02d05bbb268918d5738e5ba83fe87d965c47fbb112381053ca833efd2cf5311e314880014fc60b96d1ebef947538ab21"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/node-gyp@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/node-gyp@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"node-gyp","version":"12.4.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"38c70f36fa9308552735a06599d82afa57cda98ee04e24a63510e3637b805d1cae75e299119c6edc22ed8cc42bc78cd9c425f66ff9a936a4edc2e08981784793"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/node-gyp@12.4.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/node-gyp/-/node-gyp-12.4.0.tgz"}],"type":"library","bom-ref":"pkg:npm/node-gyp@12.4.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/node-gyp/-/node-gyp-12.4.0.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/node-gyp"},{"name":"cdx:npm:bin","value":"node-gyp"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"env-paths","version":"2.2.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"fa1d6590b2a164c4d88e8835544a49346ecd64959cb9cd830e4feab2a49345108e5e22e3790d5dd7fb9dad41a1a8cc5480097028d67471fdaea9a9f918bb92d8"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/env-paths@2.2.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"}],"type":"library","bom-ref":"pkg:npm/env-paths@2.2.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"exponential-backoff","version":"3.1.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"66011e6578f7d2af88d0437e09b492a48c8f689e475500f5f19d66faed455db01e4fde26af5cf0e74ab8aba8e2882e38ecd97f61370861201fb621aa7adc1708"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/exponential-backoff@3.1.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz"}],"type":"library","bom-ref":"pkg:npm/exponential-backoff@3.1.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"graceful-fs","version":"4.2.11","scope":"optional","hashes":[{"alg":"SHA-512","content":"45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/graceful-fs@4.2.11","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz"}],"type":"library","bom-ref":"pkg:npm/graceful-fs@4.2.11","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"nopt","version":"9.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"661ab76bec852ab63048196e2f81fd5cfde6df2e6ebd0901ff4f42c03aee0a246647f5096279fd5b8478f2bcb4b860bbd1a7933ca2f29c1b6c70ff5e7c515c3f"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/nopt@9.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/nopt@9.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/nopt"},{"name":"cdx:npm:bin","value":"nopt"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"abbrev","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"6b5c1f97268bd2d1ed25298b48e5726d8872db6bd18a1e1e76e861ae472382b5869d17eb66da2f2761518f1b93b64923e3b3bf6da7f447ce905393ae629cfc7c"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/abbrev@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/abbrev@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"tar","version":"7.5.22","scope":"optional","hashes":[{"alg":"SHA-512","content":"3053bf433bed00e9896e484e6824ef6c670537d2fd6fe26e9c8b03c1a2a58d239d70b31e6b7349d64f54b33feb8dd7d25d3ab875fcdf792ed6e29e1838000778"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/tar@7.5.22","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/tar/-/tar-7.5.22.tgz"}],"type":"library","bom-ref":"pkg:npm/tar@7.5.22","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/tar/-/tar-7.5.22.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@isaacs","name":"fs-minipass","version":"4.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"c209bd1219768e97aa3f7cf0ffb9a8de4447169e4c10386a01dc32d5f4c69070309e418e56c829bd084bf01e67d6a95bd358d5de7fdb23465f669e65580d64e3"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40isaacs/fs-minipass@4.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@isaacs/fs-minipass@4.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"chownr","version":"3.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"f88c7363d05939077f5ee60f466aef1158c5fe7aa3e64813e2412aed5a1fac3a0cd4cc6846311692b082dc4b4b8b9f5355ac314c09fea2b27015072ba84375fa"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/chownr@3.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/chownr@3.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minizlib","version":"3.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"299c58a350549160f64d514baf4310a0cf2f5148a0583dcb943f376bfef906a0bee2a1341dbd55a39bf516071f68d5ef7d7cebfb912143a8a783f09a0628d397"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minizlib@3.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/minizlib@3.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"yallist","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"620bd44dfc2ac9ced45d532b07e4889ac5584a64d2f17fed4abb5d35930898cfa7efe413ae2457c978a6d2606b4d735eab3545d0a5868073de8b2562145acd0f"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/yallist@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/yallist@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"tinyglobby","version":"0.2.17","scope":"optional","hashes":[{"alg":"SHA-512","content":"c1747f758a5ca8a99f5a911d66388a24ec023459dd0f40cc9eb5bf7188d51adb449017d581c2c51e836b963e3b9a339589cf72c8dbbae5a96c805e0d4324dada"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/tinyglobby@0.2.17","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz"}],"type":"library","bom-ref":"pkg:npm/tinyglobby@0.2.17","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"fdir","version":"6.5.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"b486d8b596ee70eb340511aa3c992c84951874bf920c7edd54cf208f2f84469dd60148cb105244fb4da46a7c87b708d63a7c2b298062c0098cd29e242c90275e"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/fdir@6.5.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz"}],"type":"library","bom-ref":"pkg:npm/fdir@6.5.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"picomatch","version":"4.0.7","scope":"optional","hashes":[{"alg":"SHA-512","content":"a9c26ef3c436216a89b030f9dbd24a31dc069bf76f2275b81ef427470887f49b62849bf318eb1c0ed1c4df1d6904a794393cac43c91598b9c9da426eef285c18"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/picomatch@4.0.7","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"}],"type":"library","bom-ref":"pkg:npm/picomatch@4.0.7","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"undici","version":"6.29.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"47e44e0c1aa9ea2da93df94676afb120e52497e44d7c6807c288a779c2aefc90ae7f6b8ed3a70e2a80db2363fb0e7e8a72cc1d2b0adccdb53a21827a2bc5fec2"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/undici@6.29.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/undici/-/undici-6.29.0.tgz"}],"type":"library","bom-ref":"pkg:npm/undici@6.29.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/undici/-/undici-6.29.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-packlist","version":"10.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"b8c5bbde26a30fc8621f8641c445771c2f9e4e7a6922ac1a923398baf81d7676a5230da5260b8abe22b5a5c5090e52169b5c12264721a4364349556c6446119e"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-packlist@10.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-packlist/-/npm-packlist-10.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-packlist@10.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-packlist/-/npm-packlist-10.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ignore-walk","version":"8.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"14278c653e0d89140687e62478a32d5ab3a60605a31e3309dba5905ab450ca8cb3a9ebdd68649a9146895b9c506268cb954564daa5270a361505ac7d10a2a0f0"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ignore-walk@8.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ignore-walk/-/ignore-walk-8.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/ignore-walk@8.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ignore-walk/-/ignore-walk-8.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-registry-fetch","version":"19.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"4da9016a9e8e335c341fbdd56550dfe388855ec392de1f8be3054c5e66d6390ae866016131c8748ee37a5d2cc13650fdeb9c882af5a0d9d7eeecd4a26982f1b7"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-registry-fetch@19.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-19.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-registry-fetch@19.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-19.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"redact","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"80e060e581cc7d9cbe4df1c0adf56883081f05e42729b6c6a37a525322bf812234015bbea4488355c2a541bd03f0c8352cd45920b67a5c6f08e5d2782ae01df5"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/redact@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/redact/-/redact-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/redact@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/redact/-/redact-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"jsonparse","version":"1.3.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"3ce417be974bebdf8296e62c8a5949ed25212afcad6235bdbc6fc62a99dffb13fc51681810cfd168ccc71e87db00b0e229b6cfd56f141189a01a5dfd5a43d9b2"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/jsonparse@1.3.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"}],"type":"library","bom-ref":"pkg:npm/jsonparse@1.3.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"make-fetch-happen","version":"15.0.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"25ed1f2c9d05e5ab40ec5f9e2252f393e5a4725e7b2437f891ff845bcc623f9137d71390c642314db81fd4e8b52f0f6d448f5410c45d239573db14f3a0d53527"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/make-fetch-happen@15.0.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.6.tgz"}],"type":"library","bom-ref":"pkg:npm/make-fetch-happen@15.0.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"agent","version":"4.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"11412e580c672f4ed2a79fe20bfd57e978fe5d3854be76de8bdcdf45665d1176bb96cb3d4531cc8401c17a0f8c6794e8f6cfe019a488f94c194cf75832f2927a"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/agent@4.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/agent/-/agent-4.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/agent@4.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/agent/-/agent-4.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"agent-base","version":"7.1.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"32703e613f1fc1f24f801c779bad0c36a6a49b7d173a4c88a07d72ea1b9342f0b43f0646ee48bc35a70b05cacf6cda28f2f119cbb269ba4efe8cc3be094a2f4d"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/agent-base@7.1.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz"}],"type":"library","bom-ref":"pkg:npm/agent-base@7.1.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"http-proxy-agent","version":"7.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"4f58240226180d6631dd5e419b2bbb1dc7dcbcbee652b4d688ceb239f6b73c8a6156227f8053dbbe2750faf7aa48e1dc8bf3f105c0da6de50d0b3a4e3832598a"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/http-proxy-agent@7.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/http-proxy-agent@7.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"debug","version":"4.4.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/debug@4.4.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/debug/-/debug-4.4.3.tgz"}],"type":"library","bom-ref":"pkg:npm/debug@4.4.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/debug/-/debug-4.4.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ms","version":"2.1.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ms@2.1.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"}],"type":"library","bom-ref":"pkg:npm/ms@2.1.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"https-proxy-agent","version":"7.0.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"bcaf4fe7f8947dd97de4023e255c94b88715b5de287efb6b3abdc736d336cb10bd6e731b11da77c74d4e8503678dbf082588b7f159531379815f071fbf2c2e4b"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/https-proxy-agent@7.0.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz"}],"type":"library","bom-ref":"pkg:npm/https-proxy-agent@7.0.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"socks-proxy-agent","version":"8.0.5","scope":"optional","hashes":[{"alg":"SHA-512","content":"1de84212ca2d16a6cf5bdb09f1655807a51b98832fee4514391205d8d9dcab8550bc17cd04b89b5bd619479765602494870703eb6f29465966ee7f84f984f327"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/socks-proxy-agent@8.0.5","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz"}],"type":"library","bom-ref":"pkg:npm/socks-proxy-agent@8.0.5","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"socks","version":"2.8.10","scope":"optional","hashes":[{"alg":"SHA-512","content":"7b4572be4553c1561588da2f46467d6a8761c55972a0c9fb78985550fc59f9e2bd3ffec2064c6fbec04e1ea14f107e35ebbdba5bcb4b5d75e32b0aa04c4aeb09"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/socks@2.8.10","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/socks/-/socks-2.8.10.tgz"}],"type":"library","bom-ref":"pkg:npm/socks@2.8.10","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/socks/-/socks-2.8.10.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ip-address","version":"10.7.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"03591dabfb526f9423bcabc032022812f0c12202fba9aa953ff8e4bd2c1861167d884cef3e9a29c69db041fbb74ae6511eda47371327f05b346d2fa07f95e6c2"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ip-address@10.7.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz"}],"type":"library","bom-ref":"pkg:npm/ip-address@10.7.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"smart-buffer","version":"4.2.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"f7884ad0787cacfa90976c577371ec681a0e5ca576d0c4e83e4717bf06c84962c4b3eeb8b01ab9905827da42431dbd4faf2f72acfd1dc6b088f5145c8bb4572a"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/smart-buffer@4.2.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"}],"type":"library","bom-ref":"pkg:npm/smart-buffer@4.2.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"http-cache-semantics","version":"4.3.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"339b792e52694b5507323bf045055d147bcf21219e2c0c4d72b5ae2647868742b1b2a0876753b7357654ffcc7b703d010dc196f246a9c4c293bf096aacd90790"}],"licenses":[{"license":{"id":"BSD-2-Clause","url":"https://opensource.org/licenses/BSD-2-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/http-cache-semantics@4.3.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.3.0.tgz"}],"type":"library","bom-ref":"pkg:npm/http-cache-semantics@4.3.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.3.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass-fetch","version":"5.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"d9dd2ad9af1e0a2d88460fc81ae6c235126861b035f983d7033415445981e3981d19969fca2be767961211fa3726291b8c6c4e767b4616f0501aa69231794015"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass-fetch@5.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-5.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass-fetch@5.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-5.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minipass-sized","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"cd2b0786da3905c5153369b52eeae75d8e8cfff70685569e813ef539f397a29af14faa3bf3419977bf7679ae857eb424b94e2eb0764851ccc040c454136a65cc"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minipass-sized@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minipass-sized/-/minipass-sized-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/minipass-sized@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minipass-sized/-/minipass-sized-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"iconv-lite","version":"0.7.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"20a5e9bc8ce39c2f574c051b54170c7c64b410f6885ed5babfecebf91469fa1a942c4a68d28c196b1eb0c91c0f3896d66f38d8b29430bac4ec7d5af489f878b9"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/iconv-lite@0.7.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz"}],"type":"library","bom-ref":"pkg:npm/iconv-lite@0.7.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"cdx:npm:package:development","value":"true"},{"name":"cdx:npm:package:optional","value":"true"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"safer-buffer","version":"2.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/safer-buffer@2.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"}],"type":"library","bom-ref":"pkg:npm/safer-buffer@2.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"cdx:npm:package:development","value":"true"},{"name":"cdx:npm:package:optional","value":"true"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"negotiator","version":"1.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"34c3c144c2608901e36ddf29846dd579b771e246751f5db5adb97922432a78eb1a869b41f412a8fddee8277cd35ea4e06a09f66d694d497921d10506337d5162"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/negotiator@1.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/negotiator/-/negotiator-1.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/negotiator@1.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/negotiator/-/negotiator-1.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"content-type","version":"2.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"9a3ed43d71348daa9a3acba435945411f122d8070bec2fefc26c1c1d5d0ef7b78ed44d69c4166eca3959af1e6c79368d060d54ebea37e70a5adf941f71cfbb6a"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/content-type@2.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/content-type@2.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"sigstore","version":"4.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"7a776a1022647e1a33ad730ae6782efd4000d3155c54415d9c724212519a131ca98d6f872b98baceedcdb5e2e8697fe215b4546c2dfe0e3b6d42cd06011afee7"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/sigstore@4.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/sigstore/-/sigstore-4.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/sigstore@4.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/sigstore/-/sigstore-4.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"bundle","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"3700a5e58d15e838b435ec6f913a9da157e68d3690c282ccdb7eabf3d284a231a6abf8cc96cf12fb36fbc8ec003dd5ef6f07ca0e53fe9665e000be2f292413f8"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/bundle@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/bundle/-/bundle-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/bundle@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/bundle/-/bundle-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"protobuf-specs","version":"0.5.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"490aaf14cb7857bf1f7637037585fa1db89548e47840add983009ad8a3aca290203c81f2d6b539503526ccb974dabe68cb26987181d1d61a700d193fc947be33"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/protobuf-specs@0.5.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.5.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/protobuf-specs@0.5.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.5.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"core","version":"3.2.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"a91b313e70ab6c2fe9b9e806c4abb29df9f180b887a964adad28f192807860aaaadd9dece1cc99ca3e3665d5850046e534feb90beac11fc12e4441c85e88bcde"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/core@3.2.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/core/-/core-3.2.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/core@3.2.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/core/-/core-3.2.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"sign","version":"4.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"1dfe31825ba48345d74364620f9bd2a0b8dd3def0e0543c0f177958d439b85eb837167585ab9c7fc1366c590b3900cbaf0cce6342c572debab26fb3a85c3f639"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/sign@4.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/sign@4.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"tuf","version":"4.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"4c20334f2d31cdd3fbf449f14a3abd290dde691efe166b9d2c2e9e44a92754a65b57b64d9462c29400106ff1cc349e67d8e04d936193d6d126534c6e3ebf922d"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/tuf@4.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/tuf@4.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"tuf-js","version":"4.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"e74415f7d902287e4ffd5b381361b3a7b068a4d57e2b34d7a9679ac6b7eee4840904e50b46c4c84bdb1e4ac3954fc667197cc2cb1e799d85808b8a89ce964a11"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/tuf-js@4.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/tuf-js/-/tuf-js-4.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/tuf-js@4.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/tuf-js/-/tuf-js-4.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@tufjs","name":"models","version":"4.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"63c70af5a820351b2a25568a525118b38b3b0af4356f5b5ad8354fc808a66f4236aa1ce3364f80fa6c6f965fe494bd1195fb8851e8bc045ed85a2b9ae2442ac3"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40tufjs/models@4.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@tufjs/models/-/models-4.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@tufjs/models@4.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@tufjs/models/-/models-4.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@tufjs","name":"canonical-json","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"c95b55f33b1da3ca851defbfde4c3cd5d48bc85ec3e7be80e5c0850a2e17ec1dfdb564fb49e91a105527be75891f3fbda8eeea2536a1d496eb0e358aa85b5d58"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40tufjs/canonical-json@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@tufjs/canonical-json/-/canonical-json-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@tufjs/canonical-json@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@tufjs/canonical-json/-/canonical-json-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@sigstore","name":"verify","version":"3.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"aafefe1b727671ceb0c058f7c8abd739a9b3aa13304a4d6880f1a68694bc89796570fac968820103ee076edb651d5bb5a6a5937666821ff584ed4382e7591da0"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40sigstore/verify@3.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@sigstore/verify/-/verify-3.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@sigstore/verify@3.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@sigstore/verify/-/verify-3.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@npmcli","name":"query","version":"5.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"f136567d340eb0e0e92eaa3d4958558c7a2f98a5cda5ebc753480ef5efb2e15e1f4483a77a25f2d2ed2c30ff4b992ef55e2beb1167d95a0e7445e1f85914f869"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40npmcli/query@5.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@npmcli/query/-/query-5.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@npmcli/query@5.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@npmcli/query/-/query-5.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"postcss-selector-parser","version":"7.1.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"eea0123f384a17697628b6e8459bb1f0209344c746895d3cbd69b22b33f3db6a99ed98d004e798eeb37336808b49489fb49ec752ad061111e6c70fedd1d09d33"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/postcss-selector-parser@7.1.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.6.tgz"}],"type":"library","bom-ref":"pkg:npm/postcss-selector-parser@7.1.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["parse"]},{"group":"","name":"cssesc","version":"3.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"fd36ff25c8cad75d67352706a1be4c36db27b4d3356823540e2a41fd39306458720ebac4e3b48ec7fd7cc05d9b6e381cdd9cc248a5b54f99ede446c5a00cff56"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cssesc@3.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/cssesc@3.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/cssesc"},{"name":"cdx:npm:bin","value":"cssesc"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"util-deprecate","version":"1.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/util-deprecate@1.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/util-deprecate@1.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"bin-links","version":"6.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"7eb135b7bf163b0278e4f295d9c176b4d3e34dcb3d2f527db3a564ad5e7dc1a9d13f81a56a89aec583d599aec1c2d84c83c5a77d2a2bcb8c393d313a15967cd7"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/bin-links@6.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/bin-links/-/bin-links-6.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/bin-links@6.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/bin-links/-/bin-links-6.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"cmd-shim","version":"8.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"264fc12ba3426a9679f01294c65488fa8b8a45b8c7d4d2d90a026462869bfaf107518ddfe8ece934137dbbb1c54aff49e934431ace0f2ce1dece828668545208"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cmd-shim@8.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cmd-shim/-/cmd-shim-8.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/cmd-shim@8.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cmd-shim/-/cmd-shim-8.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"read-cmd-shim","version":"6.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"d733391ee39f6a05c205630df377ee148ff1f93fd4859ee4f8a23386b1d7710a1e5f9fbb82668362310b4079a6cc8a1dba6047781c81253e10612eee7c082cec"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/read-cmd-shim@6.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/read-cmd-shim/-/read-cmd-shim-6.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/read-cmd-shim@6.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/read-cmd-shim/-/read-cmd-shim-6.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"write-file-atomic","version":"7.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"393224f2247cfda091581aafc6bcf1474860c56a676016e56354b984358141f93f545989c3398981014ddd6b2850a1c84afd9e0307be3e96d4cf22f508a4cb5e"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/write-file-atomic@7.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-7.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/write-file-atomic@7.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-7.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"signal-exit","version":"4.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"6f3c99d5ef3cc3d3b588d25b2a73a5bd84eb58f0e5e3a3b56c6d03dd7227bfef6d90faf1acdf235144e21650e4926296827d4ce827c8035dd2b86a8e6bd2a8af"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/signal-exit@4.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/signal-exit@4.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"common-ancestor-path","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"76737789b2dea117f61cd0be3a50a235ce5ddb3c5b2c95ceb62654b9d34549766b352c9dc5c0ac4a94735f07eeec10560887c73f0fb14dac9e06f2423ff0fc36"}],"licenses":[{"license":{"id":"BlueOak-1.0.0","url":"https://opensource.org/licenses/BlueOak-1.0.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/common-ancestor-path@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/common-ancestor-path@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"json-stringify-nice","version":"1.1.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"e59e51156eb7cb145e27bbc03605ba79914659a42f9cf13758d999a0e26b4a41a3bb67ad280d8be6bace6b5b26f3bed355316de7b03cd011f56c0adc9a52df3f"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/json-stringify-nice@1.1.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/json-stringify-nice/-/json-stringify-nice-1.1.4.tgz"}],"type":"library","bom-ref":"pkg:npm/json-stringify-nice@1.1.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/json-stringify-nice/-/json-stringify-nice-1.1.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"parse-conflict-json","version":"5.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"64712634a32ad70c895cdc0bc721e796e3df440152225881bdb2bf52239c7913ade1787d3f3d1fab8f4dcad21a79a0947f9551f3a87043fdf814270d539fcb29"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/parse-conflict-json@5.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/parse-conflict-json/-/parse-conflict-json-5.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/parse-conflict-json@5.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/parse-conflict-json/-/parse-conflict-json-5.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"just-diff","version":"6.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"4b9f5eae25f9bb7fd084c36adeffe09bc29dd30f0e4ba4f3d854b5346e1b96ffb3d0cb90701449c855a3768bccd1169de3f3f86943c5b6790d8cc8f232531260"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/just-diff@6.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/just-diff/-/just-diff-6.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/just-diff@6.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/just-diff/-/just-diff-6.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"just-diff-apply","version":"5.5.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"3984ed8517d2879e56388b55ab0a5e7cfb4db7655d2acab902700ae9aa5db51eb2087f29af40a64abef5d09d0c7fe59d432ecafceccccbb2b632001f7505110f"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/just-diff-apply@5.5.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/just-diff-apply/-/just-diff-apply-5.5.0.tgz"}],"type":"library","bom-ref":"pkg:npm/just-diff-apply@5.5.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/just-diff-apply/-/just-diff-apply-5.5.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"proggy","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"31b03847e5904fbe99066ff9254a55f72a9c26df76d7be7e634068760dc78225f3ae62aeec682af9ba67eb2eb01c7fa037d35cc8a9f7ca0d7e778ed568ac0d01"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/proggy@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/proggy/-/proggy-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/proggy@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/proggy/-/proggy-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"promise-all-reject-late","version":"1.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"bee7f42dfd253b1c904441fb18320e50c2d2ee4cfe82cf22e81f988bc742ebc6b6b327211ab1d32588213010fa93b794707d07e4fef711c902038f318a35aa5f"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/promise-all-reject-late@1.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/promise-all-reject-late/-/promise-all-reject-late-1.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/promise-all-reject-late@1.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/promise-all-reject-late/-/promise-all-reject-late-1.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"promise-call-limit","version":"3.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"9913d03b64f5410570d7513bf9474226eed2eb5789556927ce697db02d61780763d63c65d1f58c072a48b7d64e70b15ff05906f7de590fb467564ec71fbd9f67"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/promise-call-limit@3.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/promise-call-limit/-/promise-call-limit-3.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/promise-call-limit@3.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/promise-call-limit/-/promise-call-limit-3.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"treeverse","version":"3.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"81c00d6809ddd900d91661c510e17893bb9cd49ffa6bacf70c931dfd0c04cb12e82868a9b4947089de7cdabed022c16514c219dd29f17d2e764b8866d831e4b9"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/treeverse@3.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/treeverse/-/treeverse-3.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/treeverse@3.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/treeverse/-/treeverse-3.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"walk-up-path","version":"4.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"de1bbeb43f18cd22c6b8562d3d16f8f2f76128c8b4290579b27fae5abf3eedd304abfd86fddb4badd0e29e42e3aaae5321b2018d8278031fe7dd889a5bb40cf0"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/walk-up-path@4.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/walk-up-path/-/walk-up-path-4.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/walk-up-path@4.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/walk-up-path/-/walk-up-path-4.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"api","version":"1.9.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"80bc8994f1cf658740935244340f4b7877a365ed538bbeffa537859bf9cc5e6407fc715995c4bf3b65c907e2fc7e46eb352aa176d96f8c1563c705186a7347e5"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/api@1.9.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.1.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/api@1.9.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"core","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"ed83f8e171f4b55ebe31be78c766067fce22ef28bedf530166513c270be8ce4c724ef5db4a9d745fb708ed8138f42849dec84c268066089177fb540504972d18"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/core@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/core/-/core-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/core@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/core/-/core-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"semantic-conventions","version":"1.43.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"7926164e6eb6d2d4e4e3910a49e75a50bf0c15823c856d7ae21217b20207cb1bb75686d40777c50aee6dd2141bcba3a85913ec1b52a42941b633951a7622e256"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/semantic-conventions@1.43.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.43.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/semantic-conventions@1.43.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.43.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"exporter-trace-otlp-grpc","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"6efd7198d86637020ce8c754070e3262e25e55c1158952e4dee0faf6f390330b9e1c19dfca5feed079c1941d45358fd37b450ecc9cef71bc91f3037a6fe8866c"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/exporter-trace-otlp-grpc@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/exporter-trace-otlp-grpc/-/exporter-trace-otlp-grpc-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/exporter-trace-otlp-grpc@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/exporter-trace-otlp-grpc/-/exporter-trace-otlp-grpc-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"otlp-exporter-base","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"097628f140f9327f586e079b3b610be307a3b40fa0c4b98b8aee870a4d8a1f6051ed784537affaa7552509bdb70d80a379892775ebcb1ee7a3082375cb1e3e39"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/otlp-exporter-base@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/otlp-exporter-base@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"core","version":"2.9.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"9b69dc90c4fcd0d9e68d36123e325039b049fbc7609286a310e51bce72fc0076774f7c87464d8fee02353e1101735fa53a7ad813d516ad61ea243b26aa398d6f"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/core@2.9.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/core/-/core-2.9.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/core@2.9.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/core/-/core-2.9.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"otlp-transformer","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"9571abbfb29767480d1fd49535469aeafbfaa615581af2717d702531bcdb6a4897aeeef97f931997c67ba2a88c3100fbeeb8951c9085950bdb66cfd554ddbfe0"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/otlp-transformer@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/otlp-transformer@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]},"tags":["transform"]},{"group":"@opentelemetry","name":"api-logs","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"0a655ae08989fb29dfacf30d6805c7113e8185be384b0ce67f254916af678b68e05c947f97b0ba81f54575d3661cff993a43fd71fe1ff4305eebca952d31dcf7"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/api-logs@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/api-logs@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"resources","version":"2.9.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"8f20393012d0f83925dfe26c66452852f2fbc87bd4eb890bb2fa5729aad69badf8ed2975b756d715317291478f3694f9587e699bd6b642db74de221842167516"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/resources@2.9.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.9.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/resources@2.9.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.9.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-logs","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"5b2c1c4e442dbf688d9adfbacb929c778af3bf1f5b2d5b016b6370726834d4851a053913a30dd6e1df4a139bcd069103b5bf6da76d56711058fe500d46b02960"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-logs@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-logs@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-metrics","version":"2.9.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"5f1f11192e07e57101974d56b82ade308a626a1f5c09731b4a47ae21e3cf743d9c529abfbd4cd89a3f04fcc2b53ac6ce73ddc5b800f88df9f658e69c2b02e7ed"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-metrics@2.9.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.9.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-metrics@2.9.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.9.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-trace","version":"2.9.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"b06035f47bedaeb48a62cb1e1e9865b87ea3de9e976b77ea73b73bcbc7ffee66167a37359720c572949d0f59186b9d0708b51e128e330396d6d299e268fb33bb"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-trace@2.9.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-trace/-/sdk-trace-2.9.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-trace@2.9.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-trace/-/sdk-trace-2.9.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"otlp-grpc-exporter-base","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"fde22404f3014c8bccdf1ff49835f868979291889f60296704fafaf0f2f58792d5e1542fe3e495e821aba626787c85839e86d59a14d60a6d49fd045d01651fbc"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/otlp-grpc-exporter-base@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/otlp-grpc-exporter-base/-/otlp-grpc-exporter-base-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/otlp-grpc-exporter-base@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/otlp-grpc-exporter-base/-/otlp-grpc-exporter-base-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"exporter-zipkin","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"98589b038e725cb1044c88fe55c4d5c9c1457b847dd620f8d5dfabdc25347f70c35890ab202887c5422399805309922ecb05c478da3efb69677107969c7ee559"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/exporter-zipkin@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/exporter-zipkin/-/exporter-zipkin-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/exporter-zipkin@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/exporter-zipkin/-/exporter-zipkin-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"resources","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"21eefef2af0c0c5e05004402295313c7745e52fc622008088a25b773d25d98ff3e1cc703cb6d29b93f801e37b19c4c609dbbc1c6343d7e39050d6ae2909da340"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/resources@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/resources@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-trace","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"7c59d3a869bcfc6ef7190567c588bb2d76b565560452f80be972352e9bd5d1b3c2ed643f64680ac424a5f059e56412ada3d2471c41533bab3a094a6fbedc05ac"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-trace@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-trace/-/sdk-trace-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-trace@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-trace/-/sdk-trace-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"instrumentation","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"c50c771365b13f5983bcacf12f15fe0930ad34b6b9eb4609677d3ceea6077ab97662688aa6fec01fe740cbbbe6c7e795ad9e41c217d650056828ea3108d1dca7"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/instrumentation@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/instrumentation@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"import-in-the-middle","version":"3.5.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"5ac78803fe28e7af8660edd19a538fbde8d88bbef538578911e2bf7a344eb2bf5b7635be1393574ce0f50e2f132f8d10820dc9257f5a6bdec77fc8a249520a67"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/import-in-the-middle@3.5.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-3.5.2.tgz"}],"type":"library","bom-ref":"pkg:npm/import-in-the-middle@3.5.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-3.5.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"cjs-module-lexer","version":"2.3.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"9663720738ba8988aacab1314dcb5f9a377cb489f1f9d1eef4f0689937c7e515d2e77736ec9305260ccdbf94f20279b73e019ff8c2f2d3e5ace35fc7955c5d29"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cjs-module-lexer@2.3.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.3.0.tgz"}],"type":"library","bom-ref":"pkg:npm/cjs-module-lexer@2.3.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.3.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"es-module-lexer","version":"3.0.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"c9619ed4efe3f9a9669d5e21398ae6668f2ee7c25d9e65c43277914006245ada92893f3aca830810a178ae9a840e3e76b5b625df171e043dc340807072c0bd3f"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/es-module-lexer@3.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-3.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/es-module-lexer@3.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-3.0.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"module-details-from-path","version":"1.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"10658a83100b18c833bf1605d54c864f2d075d7ff6bc72e4c3af8dbc3296da3ca959b1e98d0ba3e1431ca905971c444985518a8a4a254f4e86ddb70a7b87e2ef"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/module-details-from-path@1.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/module-details-from-path/-/module-details-from-path-1.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/module-details-from-path@1.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/module-details-from-path/-/module-details-from-path-1.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"require-in-the-middle","version":"8.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"413ec554c5df58e6056de44117a9eef88eadaf64dfdeed2af112048cda1bfe178a63f9e1eddac3fe4ede78c1664908274ed0b32c3702bbf5c49e95b6c24e3109"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/require-in-the-middle@8.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/require-in-the-middle/-/require-in-the-middle-8.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/require-in-the-middle@8.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/require-in-the-middle/-/require-in-the-middle-8.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"instrumentation-grpc","version":"0.220.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"535105f0a2aee765f01f6c9b5248d50e669541919fde65e2ad14b0d4a250ace5796b29a026090f255efe9113ea6b065ed2ba5573f04afa93d2c8c5ae428c8925"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/instrumentation-grpc@0.220.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/instrumentation-grpc/-/instrumentation-grpc-0.220.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/instrumentation-grpc@0.220.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/instrumentation-grpc/-/instrumentation-grpc-0.220.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-trace-base","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"1f5f71fd35ff2d976a8983a333b7eab52c70969942e6981e95abea6d07476e176ad2afc023f4c690cd9d7c6baeca74d79893de1761e8655a0f0eef931a85bbf0"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-trace-base@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-trace-base@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"sdk-trace-node","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"0aebc2309999c6cc2134b94cd8b7ee2ce5b78777d9ba303886c1b807e4b3e1d5f6cef6973bc360ef87270c7583eb880bb334e58621b773488d5238f883ed3fb0"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/sdk-trace-node@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/sdk-trace-node/-/sdk-trace-node-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/sdk-trace-node@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/sdk-trace-node/-/sdk-trace-node-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@opentelemetry","name":"context-async-hooks","version":"2.11.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"4ebefd0f2588f22b6c05d83e8c7fa8a637ebc0bcd7f9eae4d7f131908c215a80158d5ac9227db2e7e7068d30b4572f1fc8d200ff2f30b893d9c2bd53df109979"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40opentelemetry/context-async-hooks@2.11.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@opentelemetry/context-async-hooks/-/context-async-hooks-2.11.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@opentelemetry/context-async-hooks@2.11.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@opentelemetry/context-async-hooks/-/context-async-hooks-2.11.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@types","name":"google-protobuf","version":"3.15.12","scope":"excluded","hashes":[{"alg":"SHA-512","content":"e34ba6f50ab01e3452f76aa739a0e92fb4660cad7936e658a3d1e28622516d890c4199569ee1fc01dbdb332f3fa3a9602e629b0d429af8e00b0a5b4775b393a5"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40types/google-protobuf@3.15.12","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@types/google-protobuf/-/google-protobuf-3.15.12.tgz"}],"type":"library","bom-ref":"pkg:npm/@types/google-protobuf@3.15.12","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@types/google-protobuf/-/google-protobuf-3.15.12.tgz"},{"name":"LocalNodeModulesPath","value":"node_modules/@types/google-protobuf"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@types","name":"semver","version":"7.8.0","scope":"excluded","hashes":[{"alg":"SHA-512","content":"d66008363b500975de2e427d7a15e4c0e701a6ab4bc6256d2a1a547fcdc375135d40a57489766968762a46bee78fec2fc6e273a00980c1723eb0234cbf50b32d"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40types/semver@7.8.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@types/semver/-/semver-7.8.0.tgz"}],"type":"library","bom-ref":"pkg:npm/@types/semver@7.8.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@types/semver/-/semver-7.8.0.tgz"},{"name":"LocalNodeModulesPath","value":"node_modules/@types/semver"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"execa","version":"5.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"f2e4a9659a1c01944100f20420d263dcba3d1f21a2b6595ccdcdbb121e586288e3305327f321cc0cc6941c4d89a9fab4e43ff0b9cc08e091944725edd6f721ca"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/execa@5.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/execa@5.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"cross-spawn","version":"7.0.6","scope":"optional","hashes":[{"alg":"SHA-512","content":"b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/cross-spawn@7.0.6","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"}],"type":"library","bom-ref":"pkg:npm/cross-spawn@7.0.6","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"path-key","version":"3.1.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/path-key@3.1.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"}],"type":"library","bom-ref":"pkg:npm/path-key@3.1.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"shebang-command","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/shebang-command@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/shebang-command@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"shebang-regex","version":"3.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/shebang-regex@3.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/shebang-regex@3.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"which","version":"2.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/which@2.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/which/-/which-2.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/which@2.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/which/-/which-2.0.2.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/cross-spawn/node_modules/.bin/node-which"},{"name":"cdx:npm:bin","value":"node-which"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"isexe","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/isexe@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/isexe@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"get-stream","version":"6.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"b6ce968beda3de3423aa2ef4c3902537c0c59e44b00be32a9b113374400b076a976585775ff6f50937e03cb18934c7805b174f7d4f053b59acdcd51f68708f62"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/get-stream@6.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/get-stream@6.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"human-signals","version":"2.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"07814567aabf4f68e1864b2091b116dc706f5887c35bce6c9e44206b0b74ed2ec9e505d393a064355fb4c80799acce50a4c01d625a1c1a89639f4b09fd642417"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/human-signals@2.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/human-signals@2.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"is-stream","version":"2.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"845a222624e5eb79e7fa4b2d1c606d7b05922a740ba726f5e7928785e035977f6ebed3bd9d6228a75a77b9da8f71477fc5b17554b30ee27ece23aa7b45b9e00e"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/is-stream@2.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/is-stream@2.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"merge-stream","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/merge-stream@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/merge-stream@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"npm-run-path","version":"4.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/npm-run-path@4.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/npm-run-path@4.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"onetime","version":"5.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/onetime@5.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"}],"type":"library","bom-ref":"pkg:npm/onetime@5.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"mimic-fn","version":"2.1.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/mimic-fn@2.1.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"}],"type":"library","bom-ref":"pkg:npm/mimic-fn@2.1.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"signal-exit","version":"3.0.7","scope":"optional","hashes":[{"alg":"SHA-512","content":"c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/signal-exit@3.0.7","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"}],"type":"library","bom-ref":"pkg:npm/signal-exit@3.0.7","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"strip-final-newline","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/strip-final-newline@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/strip-final-newline@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"google-protobuf","version":"3.21.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"3271bb37ddfacdc293728e097763d7d94f7a29ff4fc728003ca06e83eef82c7ce61d799c78dd7a32645c76066ff8319e7ff4bd62f4007d1b0d0a7e1c8dff72c9"}],"licenses":[{"expression":"BSD-3-Clause AND Apache-2.0"}],"purl":"pkg:npm/google-protobuf@3.21.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/google-protobuf/-/google-protobuf-3.21.4.tgz"}],"type":"library","bom-ref":"pkg:npm/google-protobuf@3.21.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/google-protobuf/-/google-protobuf-3.21.4.tgz"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"ini","version":"2.0.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"ecf9c5e283770af645db7003840e7045a60442927cab281291bb535d605e5d65e61154572bed484dc8875b01e1b23bf54e65b432069c22fea1122e695f935074"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/ini@2.0.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ini/-/ini-2.0.0.tgz"}],"type":"library","bom-ref":"pkg:npm/ini@2.0.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/ini/-/ini-2.0.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"js-yaml","version":"4.3.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"48534ebd227e0e07fff409fdd38631f828129483c2908a5aa38aa8e7596979edb94c845e8dd1f7ae1478119306a0dc77fd33f73bec335ae893165e2ca9b96dcc"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/js-yaml@4.3.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz"}],"type":"library","bom-ref":"pkg:npm/js-yaml@4.3.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz"},{"name":"cdx:npm:binPaths","value":"/app/.sbom-src-pulumi-xenorchestra-v1.5.0/sdk/nodejs/node_modules/.bin/js-yaml"},{"name":"cdx:npm:bin","value":"js-yaml"},{"name":"cdx:npm:has_binary","value":"true"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"argparse","version":"2.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"}],"licenses":[{"license":{"id":"Python-2.0","url":"https://opensource.org/licenses/Python-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/argparse@2.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/argparse@2.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"minimist","version":"1.2.8","scope":"optional","hashes":[{"alg":"SHA-512","content":"db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/minimist@1.2.8","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"}],"type":"library","bom-ref":"pkg:npm/minimist@1.2.8","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"normalize-package-data","version":"6.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"57a83282861bff9126348f8c106ad6902f9eebe46bee64e67c7af10db2f3c50a20064833a3beab928934026ead860485eccbf69cb39a8c0263e6f0c9644167ee"}],"licenses":[{"license":{"id":"BSD-2-Clause","url":"https://opensource.org/licenses/BSD-2-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/normalize-package-data@6.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-6.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/normalize-package-data@6.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-6.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"hosted-git-info","version":"7.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"a6e519014293e66f19cefb3bd975b2dc7b6f55b4d6963444eba70feb46f127302a7f60e0202a3b9584d8d881d498b9cda6362fc396ef9a81ef3dcd103b66badb"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/hosted-git-info@7.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-7.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/hosted-git-info@7.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-7.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"lru-cache","version":"10.4.3","scope":"optional","hashes":[{"alg":"SHA-512","content":"24d03365c5eb0ade365462ee633d337c0cc37c0bc9596e807d8943050c835790c2948da6e6c0262be3883bbb39f577ec46c587a74da3009ad169d3d1193b7a49"}],"licenses":[{"license":{"id":"ISC","url":"https://opensource.org/licenses/ISC","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/lru-cache@10.4.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz"}],"type":"library","bom-ref":"pkg:npm/lru-cache@10.4.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"validate-npm-package-license","version":"3.0.4","scope":"optional","hashes":[{"alg":"SHA-512","content":"0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/validate-npm-package-license@3.0.4","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"}],"type":"library","bom-ref":"pkg:npm/validate-npm-package-license@3.0.4","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"spdx-correct","version":"3.2.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"90df5d25bbe7c921d42c896e0c7cb7d961d152edce83b07db1b63bb6c14b72d42422a9cc877844ad881d3234d8baa99c5d7fa52b94f596752ddc6ef336cc2664"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/spdx-correct@3.2.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz"}],"type":"library","bom-ref":"pkg:npm/spdx-correct@3.2.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"spdx-expression-parse","version":"3.0.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/spdx-expression-parse@3.0.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"}],"type":"library","bom-ref":"pkg:npm/spdx-expression-parse@3.0.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"require-from-string","version":"2.0.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/require-from-string@2.0.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"}],"type":"library","bom-ref":"pkg:npm/require-from-string@2.0.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"source-map-support","version":"0.5.21","scope":"optional","hashes":[{"alg":"SHA-512","content":"b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/source-map-support@0.5.21","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"}],"type":"library","bom-ref":"pkg:npm/source-map-support@0.5.21","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"buffer-from","version":"1.1.2","scope":"optional","hashes":[{"alg":"SHA-512","content":"13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/buffer-from@1.1.2","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"}],"type":"library","bom-ref":"pkg:npm/buffer-from@1.1.2","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"source-map","version":"0.6.1","scope":"optional","hashes":[{"alg":"SHA-512","content":"52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"}],"licenses":[{"license":{"id":"BSD-3-Clause","url":"https://opensource.org/licenses/BSD-3-Clause","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/source-map@0.6.1","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"}],"type":"library","bom-ref":"pkg:npm/source-map@0.6.1","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"","name":"upath","version":"1.2.0","scope":"optional","hashes":[{"alg":"SHA-512","content":"699c06a5a9853bad60dce95f4fb390087aa11a75b8de2787f5665e3fb43137f1bf8d2e237ea524671a2bcaf26054f11cae5e4d2ff8201ec4a62cc1ee1fae0b86"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/upath@1.2.0","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"}],"type":"library","bom-ref":"pkg:npm/upath@1.2.0","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@types","name":"mime","version":"2.0.3","scope":"excluded","hashes":[{"alg":"SHA-512","content":"26eb3db380836eac2871ce693809e1f1285fae731c3c7b8963355c49453b96b87c362e47b88a97de88a52fcea9ddd953ae4d0bcc7442800fc643bb8d0b0ea5d9"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40types/mime@2.0.3","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"}],"type":"library","bom-ref":"pkg:npm/@types/mime@2.0.3","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"cdx:npm:package:development","value":"true"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"},{"name":"LocalNodeModulesPath","value":"node_modules/@types/mime"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}},{"group":"@types","name":"node","version":"10.17.60","scope":"excluded","hashes":[{"alg":"SHA-512","content":"17428880325fcb69c0df330b99618ac5c1f665512d0995c71dd390b36812690dbbfa535e11f1b1ce4230f74697b300135fb019df7b5a84f6f3cba2807d4ade57"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:npm/%40types/node@10.17.60","externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/@types/node/-/node-10.17.60.tgz"}],"type":"library","bom-ref":"pkg:npm/@types/node@10.17.60","properties":[{"name":"SrcFile","value":"sdk/nodejs/package-lock.json"},{"name":"cdx:npm:package:development","value":"true"},{"name":"ResolvedUrl","value":"https://registry.npmjs.org/@types/node/-/node-10.17.60.tgz"},{"name":"LocalNodeModulesPath","value":"node_modules/@types/node"},{"name":"cdx:license:category","value":"Permissive"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"sdk/nodejs/package-lock.json"}],"concludedValue":"sdk/nodejs/package-lock.json"}]}}],"dependencies":[{"ref":"pkg:npm/typescript@4.9.5","dependsOn":[]},{"ref":"pkg:npm/lodash.camelcase@4.3.0","dependsOn":[]},{"ref":"pkg:npm/long@5.3.2","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/aspromise@1.1.2","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/base64@1.1.2","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/codegen@2.0.5","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/eventemitter@1.1.1","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/fetch@1.1.1","dependsOn":["pkg:npm/@protobufjs/aspromise@1.1.2"]},{"ref":"pkg:npm/@protobufjs/float@1.0.2","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/path@1.1.2","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/pool@1.1.0","dependsOn":[]},{"ref":"pkg:npm/@protobufjs/utf8@1.1.2","dependsOn":[]},{"ref":"pkg:npm/undici-types@8.9.0","dependsOn":[]},{"ref":"pkg:npm/@types/node@26.6.4","dependsOn":["pkg:npm/undici-types@8.9.0"]},{"ref":"pkg:npm/protobufjs@7.6.6","dependsOn":["pkg:npm/@protobufjs/aspromise@1.1.2","pkg:npm/@protobufjs/base64@1.1.2","pkg:npm/@protobufjs/codegen@2.0.5","pkg:npm/@protobufjs/eventemitter@1.1.1","pkg:npm/@protobufjs/fetch@1.1.1","pkg:npm/@protobufjs/float@1.0.2","pkg:npm/@protobufjs/path@1.1.2","pkg:npm/@protobufjs/pool@1.1.0","pkg:npm/@protobufjs/utf8@1.1.2","pkg:npm/@types/node@26.6.4","pkg:npm/long@5.3.2"]},{"ref":"pkg:npm/emoji-regex@8.0.0","dependsOn":[]},{"ref":"pkg:npm/is-fullwidth-code-point@3.0.0","dependsOn":[]},{"ref":"pkg:npm/ansi-regex@5.0.1","dependsOn":[]},{"ref":"pkg:npm/strip-ansi@6.0.1","dependsOn":["pkg:npm/ansi-regex@5.0.1"]},{"ref":"pkg:npm/string-width@4.2.3","dependsOn":["pkg:npm/emoji-regex@8.0.0","pkg:npm/is-fullwidth-code-point@3.0.0","pkg:npm/strip-ansi@6.0.1"]},{"ref":"pkg:npm/color-name@1.1.4","dependsOn":[]},{"ref":"pkg:npm/color-convert@2.0.1","dependsOn":["pkg:npm/color-name@1.1.4"]},{"ref":"pkg:npm/ansi-styles@4.3.0","dependsOn":["pkg:npm/color-convert@2.0.1"]},{"ref":"pkg:npm/wrap-ansi@7.0.0","dependsOn":["pkg:npm/ansi-styles@4.3.0","pkg:npm/string-width@4.2.3","pkg:npm/strip-ansi@6.0.1"]},{"ref":"pkg:npm/cliui@8.0.1","dependsOn":["pkg:npm/string-width@4.2.3","pkg:npm/strip-ansi@6.0.1","pkg:npm/wrap-ansi@7.0.0"]},{"ref":"pkg:npm/escalade@3.2.0","dependsOn":[]},{"ref":"pkg:npm/get-caller-file@2.0.5","dependsOn":[]},{"ref":"pkg:npm/require-directory@2.1.1","dependsOn":[]},{"ref":"pkg:npm/y18n@5.0.8","dependsOn":[]},{"ref":"pkg:npm/yargs-parser@21.1.1","dependsOn":[]},{"ref":"pkg:npm/yargs@17.7.3","dependsOn":["pkg:npm/cliui@8.0.1","pkg:npm/escalade@3.2.0","pkg:npm/get-caller-file@2.0.5","pkg:npm/require-directory@2.1.1","pkg:npm/string-width@4.2.3","pkg:npm/y18n@5.0.8","pkg:npm/yargs-parser@21.1.1"]},{"ref":"pkg:npm/@grpc/proto-loader@0.8.1","dependsOn":["pkg:npm/lodash.camelcase@4.3.0","pkg:npm/long@5.3.2","pkg:npm/protobufjs@7.6.6","pkg:npm/yargs@17.7.3"]},{"ref":"pkg:npm/@js-sdsl/ordered-map@4.4.2","dependsOn":[]},{"ref":"pkg:npm/@grpc/grpc-js@1.14.5","dependsOn":["pkg:npm/@grpc/proto-loader@0.8.1","pkg:npm/@js-sdsl/ordered-map@4.4.2"]},{"ref":"pkg:npm/@logdna/tail-file@2.2.0","dependsOn":[]},{"ref":"pkg:npm/@gar/promise-retry@1.0.3","dependsOn":[]},{"ref":"pkg:npm/@isaacs/string-locale-compare@1.1.0","dependsOn":[]},{"ref":"pkg:npm/semver@7.8.5","dependsOn":[]},{"ref":"pkg:npm/@npmcli/fs@5.0.0","dependsOn":["pkg:npm/semver@7.8.5"]},{"ref":"pkg:npm/npm-normalize-package-bin@5.0.0","dependsOn":[]},{"ref":"pkg:npm/npm-bundled@5.0.0","dependsOn":["pkg:npm/npm-normalize-package-bin@5.0.0"]},{"ref":"pkg:npm/@npmcli/installed-package-contents@4.0.0","dependsOn":["pkg:npm/npm-bundled@5.0.0","pkg:npm/npm-normalize-package-bin@5.0.0"]},{"ref":"pkg:npm/@npmcli/name-from-folder@4.0.0","dependsOn":[]},{"ref":"pkg:npm/isexe@4.0.0","dependsOn":[]},{"ref":"pkg:npm/which@6.0.1","dependsOn":["pkg:npm/isexe@4.0.0"]},{"ref":"pkg:npm/@npmcli/promise-spawn@9.0.1","dependsOn":["pkg:npm/which@6.0.1"]},{"ref":"pkg:npm/ini@6.0.0","dependsOn":[]},{"ref":"pkg:npm/lru-cache@11.5.3","dependsOn":[]},{"ref":"pkg:npm/npm-install-checks@8.0.0","dependsOn":["pkg:npm/semver@7.8.5"]},{"ref":"pkg:npm/hosted-git-info@9.0.3","dependsOn":["pkg:npm/lru-cache@11.5.3"]},{"ref":"pkg:npm/proc-log@6.1.0","dependsOn":[]},{"ref":"pkg:npm/validate-npm-package-name@7.0.2","dependsOn":[]},{"ref":"pkg:npm/npm-package-arg@13.0.2","dependsOn":["pkg:npm/hosted-git-info@9.0.3","pkg:npm/proc-log@6.1.0","pkg:npm/semver@7.8.5","pkg:npm/validate-npm-package-name@7.0.2"]},{"ref":"pkg:npm/npm-pick-manifest@11.0.3","dependsOn":["pkg:npm/npm-install-checks@8.0.0","pkg:npm/npm-normalize-package-bin@5.0.0","pkg:npm/npm-package-arg@13.0.2","pkg:npm/semver@7.8.5"]},{"ref":"pkg:npm/@npmcli/git@7.0.2","dependsOn":["pkg:npm/@gar/promise-retry@1.0.3","pkg:npm/@npmcli/promise-spawn@9.0.1","pkg:npm/ini@6.0.0","pkg:npm/lru-cache@11.5.3","pkg:npm/npm-pick-manifest@11.0.3","pkg:npm/proc-log@6.1.0","pkg:npm/semver@7.8.5","pkg:npm/which@6.0.1"]},{"ref":"pkg:npm/balanced-match@4.0.4","dependsOn":[]},{"ref":"pkg:npm/brace-expansion@5.0.12","dependsOn":["pkg:npm/balanced-match@4.0.4"]},{"ref":"pkg:npm/minimatch@10.2.6","dependsOn":["pkg:npm/brace-expansion@5.0.12"]},{"ref":"pkg:npm/minipass@7.1.3","dependsOn":[]},{"ref":"pkg:npm/path-scurry@2.0.2","dependsOn":["pkg:npm/lru-cache@11.5.3","pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/glob@13.0.6","dependsOn":["pkg:npm/minimatch@10.2.6","pkg:npm/minipass@7.1.3","pkg:npm/path-scurry@2.0.2"]},{"ref":"pkg:npm/json-parse-even-better-errors@5.0.0","dependsOn":[]},{"ref":"pkg:npm/spdx-exceptions@2.5.0","dependsOn":[]},{"ref":"pkg:npm/spdx-license-ids@3.0.24","dependsOn":[]},{"ref":"pkg:npm/spdx-expression-parse@4.0.0","dependsOn":["pkg:npm/spdx-exceptions@2.5.0","pkg:npm/spdx-license-ids@3.0.24"]},{"ref":"pkg:npm/@npmcli/package-json@7.0.5","dependsOn":["pkg:npm/@npmcli/git@7.0.2","pkg:npm/glob@13.0.6","pkg:npm/hosted-git-info@9.0.3","pkg:npm/json-parse-even-better-errors@5.0.0","pkg:npm/proc-log@6.1.0","pkg:npm/semver@7.8.5","pkg:npm/spdx-expression-parse@4.0.0"]},{"ref":"pkg:npm/@npmcli/map-workspaces@5.0.3","dependsOn":["pkg:npm/@npmcli/name-from-folder@4.0.0","pkg:npm/@npmcli/package-json@7.0.5","pkg:npm/glob@13.0.6","pkg:npm/minimatch@10.2.6"]},{"ref":"pkg:npm/fs-minipass@3.0.3","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/minipass-collect@2.0.1","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/yallist@4.0.0","dependsOn":[]},{"ref":"pkg:npm/minipass@3.3.6","dependsOn":["pkg:npm/yallist@4.0.0"]},{"ref":"pkg:npm/minipass-flush@1.0.7","dependsOn":["pkg:npm/minipass@3.3.6"]},{"ref":"pkg:npm/minipass-pipeline@1.2.4","dependsOn":["pkg:npm/minipass@3.3.6"]},{"ref":"pkg:npm/p-map@7.0.8","dependsOn":[]},{"ref":"pkg:npm/ssri@13.0.1","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/cacache@20.0.4","dependsOn":["pkg:npm/@npmcli/fs@5.0.0","pkg:npm/fs-minipass@3.0.3","pkg:npm/glob@13.0.6","pkg:npm/lru-cache@11.5.3","pkg:npm/minipass-collect@2.0.1","pkg:npm/minipass-flush@1.0.7","pkg:npm/minipass-pipeline@1.2.4","pkg:npm/minipass@7.1.3","pkg:npm/p-map@7.0.8","pkg:npm/ssri@13.0.1"]},{"ref":"pkg:npm/@npmcli/node-gyp@5.0.0","dependsOn":[]},{"ref":"pkg:npm/env-paths@2.2.1","dependsOn":[]},{"ref":"pkg:npm/exponential-backoff@3.1.3","dependsOn":[]},{"ref":"pkg:npm/graceful-fs@4.2.11","dependsOn":[]},{"ref":"pkg:npm/abbrev@4.0.0","dependsOn":[]},{"ref":"pkg:npm/nopt@9.0.0","dependsOn":["pkg:npm/abbrev@4.0.0"]},{"ref":"pkg:npm/@isaacs/fs-minipass@4.0.1","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/chownr@3.0.0","dependsOn":[]},{"ref":"pkg:npm/minizlib@3.1.0","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/yallist@5.0.0","dependsOn":[]},{"ref":"pkg:npm/tar@7.5.22","dependsOn":["pkg:npm/@isaacs/fs-minipass@4.0.1","pkg:npm/chownr@3.0.0","pkg:npm/minipass@7.1.3","pkg:npm/minizlib@3.1.0","pkg:npm/yallist@5.0.0"]},{"ref":"pkg:npm/picomatch@4.0.7","dependsOn":[]},{"ref":"pkg:npm/fdir@6.5.0","dependsOn":["pkg:npm/picomatch@4.0.7"]},{"ref":"pkg:npm/tinyglobby@0.2.17","dependsOn":["pkg:npm/fdir@6.5.0","pkg:npm/picomatch@4.0.7"]},{"ref":"pkg:npm/undici@6.29.0","dependsOn":[]},{"ref":"pkg:npm/node-gyp@12.4.0","dependsOn":["pkg:npm/env-paths@2.2.1","pkg:npm/exponential-backoff@3.1.3","pkg:npm/graceful-fs@4.2.11","pkg:npm/nopt@9.0.0","pkg:npm/proc-log@6.1.0","pkg:npm/semver@7.8.5","pkg:npm/tar@7.5.22","pkg:npm/tinyglobby@0.2.17","pkg:npm/undici@6.29.0","pkg:npm/which@6.0.1"]},{"ref":"pkg:npm/@npmcli/run-script@10.0.4","dependsOn":["pkg:npm/@npmcli/node-gyp@5.0.0","pkg:npm/@npmcli/package-json@7.0.5","pkg:npm/@npmcli/promise-spawn@9.0.1","pkg:npm/node-gyp@12.4.0","pkg:npm/proc-log@6.1.0"]},{"ref":"pkg:npm/ignore-walk@8.0.0","dependsOn":["pkg:npm/minimatch@10.2.6"]},{"ref":"pkg:npm/npm-packlist@10.0.4","dependsOn":["pkg:npm/ignore-walk@8.0.0","pkg:npm/proc-log@6.1.0"]},{"ref":"pkg:npm/@npmcli/redact@4.0.0","dependsOn":[]},{"ref":"pkg:npm/jsonparse@1.3.1","dependsOn":[]},{"ref":"pkg:npm/agent-base@7.1.4","dependsOn":[]},{"ref":"pkg:npm/ms@2.1.3","dependsOn":[]},{"ref":"pkg:npm/debug@4.4.3","dependsOn":["pkg:npm/ms@2.1.3"]},{"ref":"pkg:npm/http-proxy-agent@7.0.2","dependsOn":["pkg:npm/agent-base@7.1.4","pkg:npm/debug@4.4.3"]},{"ref":"pkg:npm/https-proxy-agent@7.0.6","dependsOn":["pkg:npm/agent-base@7.1.4","pkg:npm/debug@4.4.3"]},{"ref":"pkg:npm/ip-address@10.7.3","dependsOn":[]},{"ref":"pkg:npm/smart-buffer@4.2.0","dependsOn":[]},{"ref":"pkg:npm/socks@2.8.10","dependsOn":["pkg:npm/ip-address@10.7.3","pkg:npm/smart-buffer@4.2.0"]},{"ref":"pkg:npm/socks-proxy-agent@8.0.5","dependsOn":["pkg:npm/agent-base@7.1.4","pkg:npm/debug@4.4.3","pkg:npm/socks@2.8.10"]},{"ref":"pkg:npm/@npmcli/agent@4.0.2","dependsOn":["pkg:npm/agent-base@7.1.4","pkg:npm/http-proxy-agent@7.0.2","pkg:npm/https-proxy-agent@7.0.6","pkg:npm/lru-cache@11.5.3","pkg:npm/socks-proxy-agent@8.0.5"]},{"ref":"pkg:npm/http-cache-semantics@4.3.0","dependsOn":[]},{"ref":"pkg:npm/minipass-sized@2.0.0","dependsOn":["pkg:npm/minipass@7.1.3"]},{"ref":"pkg:npm/safer-buffer@2.1.2","dependsOn":[]},{"ref":"pkg:npm/iconv-lite@0.7.3","dependsOn":["pkg:npm/safer-buffer@2.1.2"]},{"ref":"pkg:npm/minipass-fetch@5.0.2","dependsOn":["pkg:npm/iconv-lite@0.7.3","pkg:npm/minipass-sized@2.0.0","pkg:npm/minipass@7.1.3","pkg:npm/minizlib@3.1.0"]},{"ref":"pkg:npm/content-type@2.1.0","dependsOn":[]},{"ref":"pkg:npm/negotiator@1.1.0","dependsOn":["pkg:npm/content-type@2.1.0"]},{"ref":"pkg:npm/make-fetch-happen@15.0.6","dependsOn":["pkg:npm/@gar/promise-retry@1.0.3","pkg:npm/@npmcli/agent@4.0.2","pkg:npm/@npmcli/redact@4.0.0","pkg:npm/cacache@20.0.4","pkg:npm/http-cache-semantics@4.3.0","pkg:npm/minipass-fetch@5.0.2","pkg:npm/minipass-flush@1.0.7","pkg:npm/minipass-pipeline@1.2.4","pkg:npm/minipass@7.1.3","pkg:npm/negotiator@1.1.0","pkg:npm/proc-log@6.1.0","pkg:npm/ssri@13.0.1"]},{"ref":"pkg:npm/npm-registry-fetch@19.1.1","dependsOn":["pkg:npm/@npmcli/redact@4.0.0","pkg:npm/jsonparse@1.3.1","pkg:npm/make-fetch-happen@15.0.6","pkg:npm/minipass-fetch@5.0.2","pkg:npm/minipass@7.1.3","pkg:npm/minizlib@3.1.0","pkg:npm/npm-package-arg@13.0.2","pkg:npm/proc-log@6.1.0"]},{"ref":"pkg:npm/@sigstore/protobuf-specs@0.5.2","dependsOn":[]},{"ref":"pkg:npm/@sigstore/bundle@4.0.0","dependsOn":["pkg:npm/@sigstore/protobuf-specs@0.5.2"]},{"ref":"pkg:npm/@sigstore/core@3.2.1","dependsOn":[]},{"ref":"pkg:npm/@sigstore/sign@4.1.1","dependsOn":["pkg:npm/@gar/promise-retry@1.0.3","pkg:npm/@sigstore/bundle@4.0.0","pkg:npm/@sigstore/core@3.2.1","pkg:npm/@sigstore/protobuf-specs@0.5.2","pkg:npm/make-fetch-happen@15.0.6","pkg:npm/proc-log@6.1.0"]},{"ref":"pkg:npm/@tufjs/canonical-json@2.0.0","dependsOn":[]},{"ref":"pkg:npm/@tufjs/models@4.1.0","dependsOn":["pkg:npm/@tufjs/canonical-json@2.0.0","pkg:npm/minimatch@10.2.6"]},{"ref":"pkg:npm/tuf-js@4.1.0","dependsOn":["pkg:npm/@tufjs/models@4.1.0","pkg:npm/debug@4.4.3","pkg:npm/make-fetch-happen@15.0.6"]},{"ref":"pkg:npm/@sigstore/tuf@4.0.2","dependsOn":["pkg:npm/@sigstore/protobuf-specs@0.5.2","pkg:npm/tuf-js@4.1.0"]},{"ref":"pkg:npm/@sigstore/verify@3.1.1","dependsOn":["pkg:npm/@sigstore/bundle@4.0.0","pkg:npm/@sigstore/core@3.2.1","pkg:npm/@sigstore/protobuf-specs@0.5.2"]},{"ref":"pkg:npm/sigstore@4.1.1","dependsOn":["pkg:npm/@sigstore/bundle@4.0.0","pkg:npm/@sigstore/core@3.2.1","pkg:npm/@sigstore/protobuf-specs@0.5.2","pkg:npm/@sigstore/sign@4.1.1","pkg:npm/@sigstore/tuf@4.0.2","pkg:npm/@sigstore/verify@3.1.1"]},{"ref":"pkg:npm/pacote@21.5.1","dependsOn":["pkg:npm/@gar/promise-retry@1.0.3","pkg:npm/@npmcli/git@7.0.2","pkg:npm/@npmcli/installed-package-contents@4.0.0","pkg:npm/@npmcli/package-json@7.0.5","pkg:npm/@npmcli/promise-spawn@9.0.1","pkg:npm/@npmcli/run-script@10.0.4","pkg:npm/cacache@20.0.4","pkg:npm/fs-minipass@3.0.3","pkg:npm/minipass@7.1.3","pkg:npm/npm-package-arg@13.0.2","pkg:npm/npm-packlist@10.0.4","pkg:npm/npm-pick-manifest@11.0.3","pkg:npm/npm-registry-fetch@19.1.1","pkg:npm/proc-log@6.1.0","pkg:npm/sigstore@4.1.1","pkg:npm/ssri@13.0.1","pkg:npm/tar@7.5.22"]},{"ref":"pkg:npm/@npmcli/metavuln-calculator@9.0.3","dependsOn":["pkg:npm/cacache@20.0.4","pkg:npm/json-parse-even-better-errors@5.0.0","pkg:npm/pacote@21.5.1","pkg:npm/proc-log@6.1.0","pkg:npm/semver@7.8.5"]},{"ref":"pkg:npm/cssesc@3.0.0","dependsOn":[]},{"ref":"pkg:npm/util-deprecate@1.0.2","dependsOn":[]},{"ref":"pkg:npm/postcss-selector-parser@7.1.6","dependsOn":["pkg:npm/cssesc@3.0.0","pkg:npm/util-deprecate@1.0.2"]},{"ref":"pkg:npm/@npmcli/query@5.0.0","dependsOn":["pkg:npm/postcss-selector-parser@7.1.6"]},{"ref":"pkg:npm/cmd-shim@8.0.0","dependsOn":[]},{"ref":"pkg:npm/read-cmd-shim@6.0.0","dependsOn":[]},{"ref":"pkg:npm/signal-exit@4.1.0","dependsOn":[]},{"ref":"pkg:npm/write-file-atomic@7.0.1","dependsOn":["pkg:npm/signal-exit@4.1.0"]},{"ref":"pkg:npm/bin-links@6.0.2","dependsOn":["pkg:npm/cmd-shim@8.0.0","pkg:npm/npm-normalize-package-bin@5.0.0","pkg:npm/proc-log@6.1.0","pkg:npm/read-cmd-shim@6.0.0","pkg:npm/write-file-atomic@7.0.1"]},{"ref":"pkg:npm/common-ancestor-path@2.0.0","dependsOn":[]},{"ref":"pkg:npm/json-stringify-nice@1.1.4","dependsOn":[]},{"ref":"pkg:npm/just-diff@6.0.2","dependsOn":[]},{"ref":"pkg:npm/just-diff-apply@5.5.0","dependsOn":[]},{"ref":"pkg:npm/parse-conflict-json@5.0.1","dependsOn":["pkg:npm/json-parse-even-better-errors@5.0.0","pkg:npm/just-diff-apply@5.5.0","pkg:npm/just-diff@6.0.2"]},{"ref":"pkg:npm/proggy@4.0.0","dependsOn":[]},{"ref":"pkg:npm/promise-all-reject-late@1.0.1","dependsOn":[]},{"ref":"pkg:npm/promise-call-limit@3.0.2","dependsOn":[]},{"ref":"pkg:npm/treeverse@3.0.0","dependsOn":[]},{"ref":"pkg:npm/walk-up-path@4.0.0","dependsOn":[]},{"ref":"pkg:npm/@npmcli/arborist@9.9.2","dependsOn":["pkg:npm/@gar/promise-retry@1.0.3","pkg:npm/@isaacs/string-locale-compare@1.1.0","pkg:npm/@npmcli/fs@5.0.0","pkg:npm/@npmcli/installed-package-contents@4.0.0","pkg:npm/@npmcli/map-workspaces@5.0.3","pkg:npm/@npmcli/metavuln-calculator@9.0.3","pkg:npm/@npmcli/name-from-folder@4.0.0","pkg:npm/@npmcli/node-gyp@5.0.0","pkg:npm/@npmcli/package-json@7.0.5","pkg:npm/@npmcli/query@5.0.0","pkg:npm/@npmcli/redact@4.0.0","pkg:npm/@npmcli/run-script@10.0.4","pkg:npm/bin-links@6.0.2","pkg:npm/cacache@20.0.4","pkg:npm/common-ancestor-path@2.0.0","pkg:npm/hosted-git-info@9.0.3","pkg:npm/json-stringify-nice@1.1.4","pkg:npm/lru-cache@11.5.3","pkg:npm/minimatch@10.2.6","pkg:npm/nopt@9.0.0","pkg:npm/npm-install-checks@8.0.0","pkg:npm/npm-package-arg@13.0.2","pkg:npm/npm-pick-manifest@11.0.3","pkg:npm/npm-registry-fetch@19.1.1","pkg:npm/pacote@21.5.1","pkg:npm/parse-conflict-json@5.0.1","pkg:npm/proc-log@6.1.0","pkg:npm/proggy@4.0.0","pkg:npm/promise-all-reject-late@1.0.1","pkg:npm/promise-call-limit@3.0.2","pkg:npm/semver@7.8.5","pkg:npm/ssri@13.0.1","pkg:npm/treeverse@3.0.0","pkg:npm/walk-up-path@4.0.0"]},{"ref":"pkg:npm/@opentelemetry/api@1.9.1","dependsOn":[]},{"ref":"pkg:npm/@opentelemetry/semantic-conventions@1.43.0","dependsOn":[]},{"ref":"pkg:npm/@opentelemetry/core@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/core@2.9.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/api-logs@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1"]},{"ref":"pkg:npm/@opentelemetry/resources@2.9.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/sdk-logs@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api-logs@0.220.0","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/resources@2.9.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/sdk-metrics@2.9.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/resources@2.9.0"]},{"ref":"pkg:npm/@opentelemetry/sdk-trace@2.9.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/resources@2.9.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/otlp-transformer@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api-logs@0.220.0","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/resources@2.9.0","pkg:npm/@opentelemetry/sdk-logs@0.220.0","pkg:npm/@opentelemetry/sdk-metrics@2.9.0","pkg:npm/@opentelemetry/sdk-trace@2.9.0"]},{"ref":"pkg:npm/@opentelemetry/otlp-exporter-base@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/otlp-transformer@0.220.0"]},{"ref":"pkg:npm/@opentelemetry/otlp-grpc-exporter-base@0.220.0","dependsOn":["pkg:npm/@grpc/grpc-js@1.14.5","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.9.0","pkg:npm/@opentelemetry/otlp-exporter-base@0.220.0","pkg:npm/@opentelemetry/otlp-transformer@0.220.0"]},{"ref":"pkg:npm/@opentelemetry/exporter-trace-otlp-grpc@0.220.0","dependsOn":["pkg:npm/@grpc/grpc-js@1.14.5","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/otlp-exporter-base@0.220.0","pkg:npm/@opentelemetry/otlp-grpc-exporter-base@0.220.0","pkg:npm/@opentelemetry/otlp-transformer@0.220.0","pkg:npm/@opentelemetry/sdk-trace@2.9.0"]},{"ref":"pkg:npm/@opentelemetry/resources@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/sdk-trace@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/resources@2.11.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/exporter-zipkin@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/resources@2.11.0","pkg:npm/@opentelemetry/sdk-trace@2.11.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/cjs-module-lexer@2.3.0","dependsOn":[]},{"ref":"pkg:npm/es-module-lexer@3.0.3","dependsOn":[]},{"ref":"pkg:npm/module-details-from-path@1.0.4","dependsOn":[]},{"ref":"pkg:npm/import-in-the-middle@3.5.2","dependsOn":["pkg:npm/cjs-module-lexer@2.3.0","pkg:npm/es-module-lexer@3.0.3","pkg:npm/module-details-from-path@1.0.4"]},{"ref":"pkg:npm/require-in-the-middle@8.0.1","dependsOn":["pkg:npm/debug@4.4.3","pkg:npm/module-details-from-path@1.0.4"]},{"ref":"pkg:npm/@opentelemetry/instrumentation@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api-logs@0.220.0","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/import-in-the-middle@3.5.2","pkg:npm/require-in-the-middle@8.0.1"]},{"ref":"pkg:npm/@opentelemetry/instrumentation-grpc@0.220.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/instrumentation@0.220.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/sdk-trace-base@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/resources@2.11.0","pkg:npm/@opentelemetry/sdk-trace@2.11.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0"]},{"ref":"pkg:npm/@opentelemetry/context-async-hooks@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1"]},{"ref":"pkg:npm/@opentelemetry/sdk-trace-node@2.11.0","dependsOn":["pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/context-async-hooks@2.11.0","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/sdk-trace-base@2.11.0"]},{"ref":"pkg:npm/@types/google-protobuf@3.15.12","dependsOn":[]},{"ref":"pkg:npm/@types/semver@7.8.0","dependsOn":[]},{"ref":"pkg:npm/path-key@3.1.1","dependsOn":[]},{"ref":"pkg:npm/shebang-regex@3.0.0","dependsOn":[]},{"ref":"pkg:npm/shebang-command@2.0.0","dependsOn":["pkg:npm/shebang-regex@3.0.0"]},{"ref":"pkg:npm/isexe@2.0.0","dependsOn":[]},{"ref":"pkg:npm/which@2.0.2","dependsOn":["pkg:npm/isexe@2.0.0"]},{"ref":"pkg:npm/cross-spawn@7.0.6","dependsOn":["pkg:npm/path-key@3.1.1","pkg:npm/shebang-command@2.0.0","pkg:npm/which@2.0.2"]},{"ref":"pkg:npm/get-stream@6.0.1","dependsOn":[]},{"ref":"pkg:npm/human-signals@2.1.0","dependsOn":[]},{"ref":"pkg:npm/is-stream@2.0.1","dependsOn":[]},{"ref":"pkg:npm/merge-stream@2.0.0","dependsOn":[]},{"ref":"pkg:npm/npm-run-path@4.0.1","dependsOn":["pkg:npm/path-key@3.1.1"]},{"ref":"pkg:npm/mimic-fn@2.1.0","dependsOn":[]},{"ref":"pkg:npm/onetime@5.1.2","dependsOn":["pkg:npm/mimic-fn@2.1.0"]},{"ref":"pkg:npm/signal-exit@3.0.7","dependsOn":[]},{"ref":"pkg:npm/strip-final-newline@2.0.0","dependsOn":[]},{"ref":"pkg:npm/execa@5.1.1","dependsOn":["pkg:npm/cross-spawn@7.0.6","pkg:npm/get-stream@6.0.1","pkg:npm/human-signals@2.1.0","pkg:npm/is-stream@2.0.1","pkg:npm/merge-stream@2.0.0","pkg:npm/npm-run-path@4.0.1","pkg:npm/onetime@5.1.2","pkg:npm/signal-exit@3.0.7","pkg:npm/strip-final-newline@2.0.0"]},{"ref":"pkg:npm/google-protobuf@3.21.4","dependsOn":[]},{"ref":"pkg:npm/ini@2.0.0","dependsOn":[]},{"ref":"pkg:npm/argparse@2.0.1","dependsOn":[]},{"ref":"pkg:npm/js-yaml@4.3.2","dependsOn":["pkg:npm/argparse@2.0.1"]},{"ref":"pkg:npm/minimist@1.2.8","dependsOn":[]},{"ref":"pkg:npm/lru-cache@10.4.3","dependsOn":[]},{"ref":"pkg:npm/hosted-git-info@7.0.2","dependsOn":["pkg:npm/lru-cache@10.4.3"]},{"ref":"pkg:npm/spdx-expression-parse@3.0.1","dependsOn":["pkg:npm/spdx-exceptions@2.5.0","pkg:npm/spdx-license-ids@3.0.24"]},{"ref":"pkg:npm/spdx-correct@3.2.0","dependsOn":["pkg:npm/spdx-expression-parse@3.0.1","pkg:npm/spdx-license-ids@3.0.24"]},{"ref":"pkg:npm/validate-npm-package-license@3.0.4","dependsOn":["pkg:npm/spdx-correct@3.2.0","pkg:npm/spdx-expression-parse@3.0.1"]},{"ref":"pkg:npm/normalize-package-data@6.0.2","dependsOn":["pkg:npm/hosted-git-info@7.0.2","pkg:npm/semver@7.8.5","pkg:npm/validate-npm-package-license@3.0.4"]},{"ref":"pkg:npm/require-from-string@2.0.2","dependsOn":[]},{"ref":"pkg:npm/buffer-from@1.1.2","dependsOn":[]},{"ref":"pkg:npm/source-map@0.6.1","dependsOn":[]},{"ref":"pkg:npm/source-map-support@0.5.21","dependsOn":["pkg:npm/buffer-from@1.1.2","pkg:npm/source-map@0.6.1"]},{"ref":"pkg:npm/upath@1.2.0","dependsOn":[]},{"ref":"pkg:npm/@pulumi/pulumi@3.267.0","dependsOn":["pkg:npm/@grpc/grpc-js@1.14.5","pkg:npm/@logdna/tail-file@2.2.0","pkg:npm/@npmcli/arborist@9.9.2","pkg:npm/@opentelemetry/api@1.9.1","pkg:npm/@opentelemetry/core@2.11.0","pkg:npm/@opentelemetry/exporter-trace-otlp-grpc@0.220.0","pkg:npm/@opentelemetry/exporter-zipkin@2.11.0","pkg:npm/@opentelemetry/instrumentation-grpc@0.220.0","pkg:npm/@opentelemetry/instrumentation@0.220.0","pkg:npm/@opentelemetry/resources@2.11.0","pkg:npm/@opentelemetry/sdk-trace-base@2.11.0","pkg:npm/@opentelemetry/sdk-trace-node@2.11.0","pkg:npm/@opentelemetry/semantic-conventions@1.43.0","pkg:npm/@types/google-protobuf@3.15.12","pkg:npm/@types/semver@7.8.0","pkg:npm/execa@5.1.1","pkg:npm/google-protobuf@3.21.4","pkg:npm/ini@2.0.0","pkg:npm/js-yaml@4.3.2","pkg:npm/minimist@1.2.8","pkg:npm/normalize-package-data@6.0.2","pkg:npm/require-from-string@2.0.2","pkg:npm/semver@7.8.5","pkg:npm/source-map-support@0.5.21","pkg:npm/typescript@4.9.5","pkg:npm/upath@1.2.0"]},{"ref":"pkg:npm/@types/mime@2.0.3","dependsOn":[]},{"ref":"pkg:npm/@types/node@10.17.60","dependsOn":[]},{"ref":"pkg:npm/@vates/pulumi-xenorchestra@1.3.3","dependsOn":["pkg:npm/@pulumi/pulumi@3.267.0","pkg:npm/@types/mime@2.0.3","pkg:npm/@types/node@10.17.60","pkg:npm/typescript@4.9.5"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:npm/@vates/pulumi-xenorchestra@1.3.3"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-10-05T15:53:52Z","text":"This Software Bill-of-Materials (SBOM) document was created on Monday, October 5, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'pulumi-xenorchestra' with version '1.3.3'. The package type in this SBOM is npm with 12 purl namespaces described under components. The components were identified from the source files: sdk/nodejs/package-lock.json."}]}